#cwe-79

共收录 5879 条相关情报。

← 返回所有主题
漏洞预警2026-05-21 发布INFO

Webmin before 2.641 contains a stored cross-site scripting vulnerability in the email template description field of the System and Server Status module that allows low-privilege...

CVE-2026-22678

Webmin before 2.641 contains a stored cross-site scripting vulnerability in the email template description field of the

历史摘要 · 未重新核验 · NVD

安全公告2026-05-21 发布INFO

Concrete CMS 9.5.0 and below has Stored XSS on the height parameter. The controller does not...

CVE-2026-8203

Concrete CMS 9.5.0 and below has Stored XSS on the height parameter. The controller does not validate or sanitize $heigh

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-21 发布INFO

Concrete CMS 9.5.0 and below is vulnerable to Stored XSS via OAuth integration name. The OAuth...

CVE-2026-8197

Concrete CMS 9.5.0 and below is vulnerable to Stored XSS via OAuth integration name. The OAuth authorize template render

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-21 发布INFO

Concrete CMS 9.5.0 and below has Stored XSS on the height parameter. The controller does not validate or sanitize $height. Any user with editor privileges can inject malicious J...

CVE-2026-8203

Concrete CMS 9.5.0 and below has Stored XSS on the height parameter. The controller does not validate or sanitize $heigh

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-21 发布INFO

Concrete CMS 9.5.0 and below is vulnerable to Stored XSS via OAuth integration name. The OAuth authorize template renders the integration name (admin-controlled) through Concret...

CVE-2026-8197

Concrete CMS 9.5.0 and below is vulnerable to Stored XSS via OAuth integration name. The OAuth authorize template render

历史摘要 · 未重新核验 · NVD

安全公告2026-05-21 发布INFO

Umbraco.Cms: XSS/HTML Injection in Umbraco Backoffice confirmation dialog

CVE-2026-46609

### Impact Authenticated users are able to inject HTML vulnerability into an input field, which is rendered in the confi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-21 发布INFO

NocoDB: Reflected Cross-Site Scripting via Page Leaving Redirect URL

CVE-2026-46547

### Summary A reflected XSS vulnerability exists in the Page Leaving Warning page. The `ncRedirectUrl` and `ncBackUrl` q

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-21 发布INFO

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in ticketsmdb_import.php that allows authenticated attackers to inject arbitrary JavaScri...

CVE-2026-48230

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in ticketsmdb_import.php that al

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-21 发布INFO

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in routes_i.php that allows authenticated attackers to inject arbitrary JavaScript by pas...

CVE-2026-48229

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in routes_i.php that allows auth

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-21 发布INFO

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in patient_w.php that allows authenticated attackers to inject arbitrary JavaScript by pa...

CVE-2026-48228

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in patient_w.php that allows aut

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-21 发布INFO

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in patient.php that allows authenticated attackers to inject arbitrary JavaScript by pass...

CVE-2026-48227

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in patient.php that allows authe

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-21 发布INFO

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in os_watch.php that allows authenticated attackers to inject arbitrary JavaScript by pas...

CVE-2026-48226

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in os_watch.php that allows auth

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-21 发布INFO

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in landb.php that allows authenticated attackers to inject arbitrary JavaScript by passin...

CVE-2026-48225

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in landb.php that allows authent

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-21 发布INFO

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in ics214.php that allows authenticated attackers to inject arbitrary JavaScript by passi...

CVE-2026-48224

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in ics214.php that allows authen

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-21 发布INFO

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in ics213rr.php that allows authenticated attackers to inject arbitrary JavaScript by pas...

CVE-2026-48223

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in ics213rr.php that allows auth

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-21 发布INFO

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in ics213.php that allows authenticated attackers to inject arbitrary JavaScript by passi...

CVE-2026-48222

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in ics213.php that allows authen

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-21 发布INFO

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in ics205a.php that allows authenticated attackers to inject arbitrary JavaScript by pass...

CVE-2026-48221

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in ics205a.php that allows authe

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-21 发布INFO

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in ics205.php that allows authenticated attackers to inject arbitrary JavaScript by passi...

CVE-2026-48220

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in ics205.php that allows authen

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-21 发布INFO

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in ics202.php that allows authenticated attackers to inject arbitrary JavaScript by passi...

CVE-2026-48219

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in ics202.php that allows authen

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-21 发布INFO

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in icons/buttons/landb.php that allows authenticated attackers to inject arbitrary JavaSc...

CVE-2026-48218

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in icons/buttons/landb.php that

历史摘要 · 未重新核验 · NVD