#cwe-79

共收录 5879 条相关情报。

漏洞预警2026-05-26 发布INFO

A security flaw has been discovered in stonith404 pingvin-share up to 1.13.0. This affects the function getServerSideProps of the file frontend/src/pages/auth/signIn.tsx of the ...

CVE-2026-9519

A security flaw has been discovered in stonith404 pingvin-share up to 1.13.0. This affects the function getServerSidePro

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-05-26 发布INFO

A vulnerability was identified in hemant6488 CodeIgniter-StudentManagementSystem. The impacted element is the function addStudent of the file view_students.php of the component ...

CVE-2026-9518

A vulnerability was identified in hemant6488 CodeIgniter-StudentManagementSystem. The impacted element is the function a

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-05-25 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Melapress WP Activity Log allows DOM-Based XSS. This issue affects WP Acti...

CVE-2026-45435

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Melapress WP Activ

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-05-25 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PickPlugins Team Showcase allows Stored XSS. This issue affects Team Showc...

CVE-2025-62745

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PickPlugins Team S

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-05-25 发布INFO

A vulnerability was identified in SourceCodester Student Grades Management System 1.0. Affected by this issue is some unknown functionality of the file students.php. The manipul...

CVE-2026-9485

A vulnerability was identified in SourceCodester Student Grades Management System 1.0. Affected by this issue is some un

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-05-25 发布INFO

In Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1, an unsanitized subject field in the draft restored value could lead to stored XSS/HTML/CSS injection on shared m...

CVE-2026-48849

In Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1, an unsanitized subject field in the draft restored valu

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-05-25 发布INFO

Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7 has insufficient HTML sanitization that could lead to Cascading Style Sheets (CSS) injection via an SVG document that ...

CVE-2026-48848

Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7 has insufficient HTML sanitization that could lead to Cascadi

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-05-25 发布INFO

A vulnerability was detected in yashpokharna2555 StudentManagementSystem cb2f558ddf8d19396de0f92abf2d224d46a0a203. This impacts an unknown function of the file /student.php. Per...

CVE-2026-9471

A vulnerability was detected in yashpokharna2555 StudentManagementSystem cb2f558ddf8d19396de0f92abf2d224d46a0a203. This

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

安全公告2026-05-22 发布INFO

The WP Blockade plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ...

CVE-2026-3481

The WP Blockade plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'shortcode' parameter in al

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-79 #severity:medium

安全公告2026-05-22 发布INFO

The KIA Subtitle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin...

CVE-2026-7509

The KIA Subtitle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `the-subtitle` short

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-79 #severity:medium

安全公告2026-05-22 发布INFO

The CBX 5 Star Rating & Review plugin for WordPress is vulnerable to Reflected Cross-Site...

CVE-2026-6864

The CBX 5 Star Rating & Review plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' param

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-79 #severity:medium

漏洞预警2026-05-22 发布MEDIUM

The Draft List plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Draft Post Title in all versions up to, and including, 2.6.3 due to insufficient input sanit...

CVE-2026-9104

该漏洞位于WordPress的Draft List插件（版本2.6.3及以下）中，由于对用户输入的草稿文章标题缺乏充分的清理和输出转义，导致存储型跨站脚本攻击（Stored XSS）。攻击者需拥有作者级别或更高权限，可以通过在草稿标题中注入

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-05-22 发布MEDIUM

The KIA Subtitle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `the-subtitle` shortcode `before` and `after` attributes in all versions up t...

CVE-2026-7509

CVE-2026-7509 是 WordPress KIA Subtitle 插件（版本 ≤ 4.0.1）中一个存储型跨站脚本（XSS）漏洞。该漏洞存在于插件的 `the-subtitle` 短代码的 `before` 和 `after`

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-05-22 发布MEDIUM

The CBX 5 Star Rating & Review plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 1.0.7 due to i...

CVE-2026-6864

CBX 5 Star Rating & Review 是一款 WordPress 插件，用于展示评论和评分。该插件在 1.0.7 及之前的所有版本中存在反射型跨站脚本（XSS）漏洞，源于对 'page' 参数缺乏充分的输入清理和输出转义。未

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-05-22 发布MEDIUM

The WP Blockade plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'shortcode' parameter in all versions up to and including 0.9.14. This is due to ins...

CVE-2026-3481

CVE-2026-3481 是 WordPress WP Blockade 插件中的一个反射型跨站脚本（XSS）漏洞，影响版本 0.9.14 及之前的所有版本。该漏洞位于 render_shortcode_preview() 函数中，该函数

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

安全公告2026-05-22 发布INFO

Concrete CMS 9.5.0 and below is vulnerable to Stored XSS via external-link page cvName because...

CVE-2026-8139

Concrete CMS 9.5.0 and below is vulnerable to Stored XSS via external-link page cvName because updateCollectionAliasExte

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-79 #severity:low

安全公告2026-05-22 发布INFO

Webmin before 2.641 contains a stored cross-site scripting vulnerability in the email template...

CVE-2026-22678

Webmin before 2.641 contains a stored cross-site scripting vulnerability in the email template description field of the

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-79 #severity:medium

安全公告2026-05-22 发布INFO

In the Drupal 7 Term Reference Tree module, two stored XSS vectors exist in the widget/formatter...

CVE-2026-4093

In the Drupal 7 Term Reference Tree module, two stored XSS vectors exist in the widget/formatter rendering pipeline. Ve

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-79 #severity:medium

漏洞预警2026-05-21 发布INFO

Concrete CMS 9.5.0 and below is vulnerable to Stored XSS via external-link page cvName because updateCollectionAliasExternal bypasses being sanitized. The Concrete CMS security ...

CVE-2026-8139

Concrete CMS 9.5.0 and below is vulnerable to Stored XSS via external-link page cvName because updateCollectionAliasExte

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-05-21 发布INFO

In the Drupal 7 Term Reference Tree module, two stored XSS vectors exist in the widget/formatter rendering pipeline. Vector A (token display templates): When the Token module i...

CVE-2026-4093

In the Drupal 7 Term Reference Tree module, two stored XSS vectors exist in the widget/formatter rendering pipeline. Ve

历史摘要 · 未重新核验 · NVD

#cve #cwe-79