共收录 5879 条相关情报。
← 返回所有主题CVE-2026-9281
CVE-2026-9281 是一个影响 WordPress 插件 Master Addons For Elementor（版本 ≤ 3.1.0）的存储型跨站脚本（Stored XSS）漏洞。该漏洞位于插件的 'jtlma_custom_js
CVE-2026-8901
CVE-2026-8901 影响 WordPress 的 Integration for Freshsales 插件（版本 ≤ 1.0.15），该插件用于将 Contact Form 7、WPForms、Elementor、Gravity
CVE-2026-8438
CVE-2026-8438 是一个影响 WordPress 插件 All-In-One Security (AIOS) – Security and Firewall 的存储型跨站脚本 (XSS) 漏洞，影响版本 ≤ 5.4.7。漏洞源于插
CVE-2026-8900
The Simple SEO Slideshow plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in a
CVE-2026-8893
The Express Payment For Stripe plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'type' attribut
CVE-2026-8900
The Simple SEO Slideshow plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in a
CVE-2026-8893
The Express Payment For Stripe plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'type' attribut
CVE-2026-47730
### Description `Twig\Profiler\Dumper\HtmlDumper` writes `Profile::getTemplate()` and `Profile::getName()` straight int
CVE-2026-25624
An administrative cross-site scripting (XSS) vulnerability exists in the web user interface dashboard layout of Arista E
CVE-2026-47743
## Impact Three related defects on admin Livewire components allowed data tampering, sensitive data disclosure, and sto
CVE-2026-47761
### Impact Stored XSS vulnerability in the media plugin. Attackers can inject malicious scripts via crafted `data-mce-*`
CVE-2026-47762
### Impact Stored XSS vulnerability via forged mce:protected comments. Allows attackers to bypass sanitization and injec
CVE-2026-47759
### Impact Stored XSS vulnerability via unsanitized data-mce-* attributes (data-mce-href, data-mce-src, data-mce-style).
CVE-2026-45778
OpenXDMoD is an open framework for collecting and analyzing HPC metrics. Prior to version 11.0.3, an authenticated attac
CVE-2026-25624
An administrative cross-site scripting (XSS) vulnerability exists in the web user interface dashboard layout of Arista E
CVE-2026-47760
### Impact TinyMCE 6.8.x contains an XSS vulnerability caused by improper SVG namespace scope handling in the sanitizer.
CVE-2026-46511
HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to version 26.0.0, an attack chain utilizing
CVE-2026-46496
HAX CMS helps manage microsite universe with PHP or NodeJs backends. A stored cross-site scripting (XSS) vulnerability e
CVE-2026-46396
HAX CMS helps manage microsite universe with PHP or NodeJs backends. A stored cross-site scripting (XSS) vulnerability e
CVE-2026-11337
A vulnerability was found in tittuvarghese CollegeManagementSystem 3e476335cfbfb9a049e09f474c7ec885f69a9df3/a38852979f7e