Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-155
CVE-2026-96361
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform all
#cwe-79
共收录 5343 条相关情报。
← 返回所有主题Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-158
CVE-2026-96358
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform all
Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-159
CVE-2026-96359
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform all
Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-160
CVE-2026-96362
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform all
Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-163
CVE-2026-96368
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform all
Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-172
CVE-2026-96357
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform all
In Splunk SOAR versions below 8.7.0, a user that holds a role with the install_apps capability could store attacker-controlled content that Splunk SOAR displays in app documenta...
CVE-2026-76303
In Splunk SOAR versions below 8.7.0, a user that holds a role with the install_apps capability could store attacker-cont
Vaadin Charts renders charts with the Highcharts library and pins an exact version of it, 9.2.2 in Vaadin 22 to 24 and 12.2.0 in Vaadin 25, so an application cannot remove these...
CVE-2026-107588
Vaadin Charts renders charts with the Highcharts library and pins an exact version of it, 9.2.2 in Vaadin 22 to 24 and 1
Multiple Vulnerabilities in the Highcharts Library Bundled with Vaadin Charts
CVE-2026-107588
Vaadin Charts renders charts with the Highcharts library and pins an exact version of it, 9.2.2 in Vaadin 22 to 24 and 1
Nuxt is an open-source web development framework for Vue.js. From 3.13.0 until 4.6.2, the server-island renderer serializes raw useHeadSafe entry input into the island response ...
CVE-2026-114133
Nuxt is an open-source web development framework for Vue.js. From 3.13.0 until 4.6.2, the server-island renderer seriali
Nuxt is an open-source web development framework for Vue.js. Prior to 4.6.0, an incomplete fix for CVE-2026-53722 allows an application with pages disabled to render a script-ca...
CVE-2026-114130
Nuxt is an open-source web development framework for Vue.js. Prior to 4.6.0, an incomplete fix for CVE-2026-53722 allows
Astro is a web framework for content-driven websites. Prior to 7.3.2, Astro's JSX and MDX rendering pipeline treats string children of script and style elements as trusted HTML ...
CVE-2026-114128
Astro is a web framework for content-driven websites. Prior to 7.3.2, Astro's JSX and MDX rendering pipeline treats stri
Astro is a web framework for content-driven websites. From 7.1.0 until 7.3.3, Astro's server-side View Transition CSS generator does not keep string animation properties within ...
CVE-2026-114127
Astro is a web framework for content-driven websites. From 7.1.0 until 7.3.3, Astro's server-side View Transition CSS ge
Nuxt server islands render `useHeadSafe` input without sanitisation
CVE-2026-114133
Nuxt is an open-source web development framework for Vue.js. From 3.13.0 until 4.6.2, the server-island renderer seriali
Nuxt: Incomplete fix for GHSA-934w-87qh-qr26: a `javascript:` URL prefixed with an ASCII control character executes from `<NuxtLink>` when `pages` is disabled
CVE-2026-114130
Nuxt is an open-source web development framework for Vue.js. Prior to 4.6.0, an incomplete fix for CVE-2026-53722 allows
odf-kit allows users to generate, fill, read, and convert OpenDocument Format files (.odt, .ods) in TypeScript and JavaScript. Starting in version 0.6.0 and prior to version 0.1...
CVE-2026-113787
odf-kit allows users to generate, fill, read, and convert OpenDocument Format files (.odt, .ods) in TypeScript and JavaS
The Authentication Endpoint accepts user-supplied input without sufficient encoding, allowing for the injection of malicious JavaScript payloads. This vulnerability can be trigg...
CVE-2024-5139
The Authentication Endpoint accepts user-supplied input without sufficient encoding, allowing for the injection of malic
SvelteKit (@sveltejs/kit) before 3.0.0 contains a cross-site scripting vulnerability in...
CVE-2026-114061
SvelteKit (@sveltejs/kit) before 3.0.0 contains a cross-site scripting vulnerability in prerendered pages because a cach
A vulnerability has been found in itsourcecode Online Cake Ordering System 1.0. Affected by this...
CVE-2026-113741
A vulnerability has been found in itsourcecode Online Cake Ordering System 1.0. Affected by this issue is some unknown f
SvelteKit (@sveltejs/kit) before 3.0.0 contains a cross-site scripting vulnerability in prerendered pages because a cache-control header value set via setHeaders is inserted wit...
CVE-2026-114061
SvelteKit (@sveltejs/kit) before 3.0.0 contains a cross-site scripting vulnerability in prerendered pages because a cach