#cwe-79

共收录 5879 条相关情报。

← 返回所有主题
安全公告2026-06-02 发布INFO

The Auto Image Attributes From Filename With Bulk Updater (Add Alt Text, Image Title For Image...

CVE-2026-3722

The Auto Image Attributes From Filename With Bulk Updater (Add Alt Text, Image Title For Image SEO) plugin for WordPress

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-02 发布INFO

A security vulnerability has been detected in 1Panel-dev CordysCRM up to 1.4.1. This impacts the...

CVE-2026-10567

A security vulnerability has been detected in 1Panel-dev CordysCRM up to 1.4.1. This impacts the function Save of the fi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-02 发布INFO

Cross-Site Scripting (XSS) in GeniexWebView component in Transsion AI Assistant Lifestyle...

CVE-2026-10510

Cross-Site Scripting (XSS) in GeniexWebView component in Transsion AI Assistant Lifestyle application (com.transsion.aia

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-02 发布INFO

The Simple Custom Login Page plugin for WordPress is vulnerable to Stored Cross-Site Scripting...

CVE-2026-10100

The Simple Custom Login Page plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the color settings fi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-02 发布INFO

A weakness has been identified in westboy CicadasCMS up to...

CVE-2026-10529

A weakness has been identified in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. Impacted is an unkn

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-02 发布INFO

The Auto Image Attributes From Filename With Bulk Updater (Add Alt Text, Image Title For Image SEO) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the att...

CVE-2026-3722

The Auto Image Attributes From Filename With Bulk Updater (Add Alt Text, Image Title For Image SEO) plugin for WordPress

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-02 发布INFO

A security vulnerability has been detected in 1Panel-dev CordysCRM up to 1.4.1. This impacts the function Save of the file src/main/java/cn/cordys/crm/system/service/ModuleFormS...

CVE-2026-10567

A security vulnerability has been detected in 1Panel-dev CordysCRM up to 1.4.1. This impacts the function Save of the fi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-02 发布INFO

Cross-Site Scripting (XSS) in GeniexWebView component in Transsion AI Assistant Lifestyle application (com.transsion.aiassistantlifestyle) all versions on Android allows remote ...

CVE-2026-10510

Cross-Site Scripting (XSS) in GeniexWebView component in Transsion AI Assistant Lifestyle application (com.transsion.aia

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-02 发布INFO

The Simple Custom Login Page plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the color settings fields (Page Background, Form Background, Text Color, Link ...

CVE-2026-10100

The Simple Custom Login Page plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the color settings fi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-02 发布INFO

A weakness has been identified in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. Impacted is an unknown function of the file src/main/java/com/zhiliao/module...

CVE-2026-10529

A weakness has been identified in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. Impacted is an unkn

历史摘要 · 未重新核验 · NVD

安全公告2026-06-02 发布INFO

A vulnerability has been found in 1Panel-dev CordysCRM up to 1.6.2. This affects an unknown...

CVE-2026-10514

A vulnerability has been found in 1Panel-dev CordysCRM up to 1.6.2. This affects an unknown function of the file backend

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-02 发布INFO

A vulnerability was detected in itsourcecode Fees Management System 1.0. The affected element is...

CVE-2026-10301

A vulnerability was detected in itsourcecode Fees Management System 1.0. The affected element is an unknown function of

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-02 发布INFO

A vulnerability has been found in 1Panel-dev CordysCRM up to 1.6.2. This affects an unknown function of the file backend/framework/src/main/java/cn/cordys/config/RequestParamTri...

CVE-2026-10514

A vulnerability has been found in 1Panel-dev CordysCRM up to 1.6.2. This affects an unknown function of the file backend

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-02 发布INFO

A vulnerability was detected in itsourcecode Fees Management System 1.0. The affected element is an unknown function of the file index.php. Performing a manipulation of the argu...

CVE-2026-10301

A vulnerability was detected in itsourcecode Fees Management System 1.0. The affected element is an unknown function of

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-01 发布INFO

Kiteworks is a private data network (PDN). Prior to version 9.3.0, a stored XSS vulnerability in Kiteworks Secure Data Forms could allow an authenticated attacker to execute arb...

CVE-2026-24754

Kiteworks is a private data network (PDN). Prior to version 9.3.0, a stored XSS vulnerability in Kiteworks Secure Data F

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-01 发布INFO

Kiteworks is a private data network (PDN). Prior to version 9.3.0, a reflected XSS vulnerability in Kiteworks Secure Data Forms could allow an external attacker to trick a user ...

CVE-2026-24752

Kiteworks is a private data network (PDN). Prior to version 9.3.0, a reflected XSS vulnerability in Kiteworks Secure Dat

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-01 发布INFO

Kiteworks is a private data network (PDN). Prior to version 9.3.0, a reflected XSS vulnerability in Kiteworks Secure Data Forms could allow an external attacker to trick a user ...

CVE-2026-24751

Kiteworks is a private data network (PDN). Prior to version 9.3.0, a reflected XSS vulnerability in Kiteworks Secure Dat

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-01 发布INFO

A security flaw has been discovered in code-projects Hotel and Tourism Reservation System 1.0. Impacted is an unknown function of the file /ht/tour.php. Performing a manipulatio...

CVE-2026-10289

A security flaw has been discovered in code-projects Hotel and Tourism Reservation System 1.0. Impacted is an unknown fu

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-01 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP GiveWP allows DOM-Based XSS. This issue affects Giv...

CVE-2026-42678

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / Stell

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-01 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in myCred allows Stored XSS. This issue affects myCred: from n/a through 3.0.4.

CVE-2026-42676

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in myCred allows Stor

历史摘要 · 未重新核验 · NVD