#cwe-79

共收录 5879 条相关情报。

← 返回所有主题
漏洞预警2026-05-20 发布INFO

The Cost of Goods by PixelYourSite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'csvdata[0][cost_of_goods_value]' parameter in versions up to, and i...

CVE-2026-7613

The Cost of Goods by PixelYourSite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'csvdata[0]

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-20 发布INFO

InfoScale VIOM 9.1.3 allows XSS.

CVE-2026-44924

InfoScale VIOM 9.1.3 allows XSS.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-20 发布INFO

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Beyaz Computer Software Design Industry and Trade Ltd. Co. CityPLus allows ...

CVE-2026-5783

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Beyaz Computer Sof

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-20 发布INFO

The affected Kieback & Peter DDC building controllers are vulnerable to cross-site scripting, enabling JavaScript to be executed by the victim's browser, which allows the attack...

CVE-2026-4293

The affected Kieback & Peter DDC building controllers are vulnerable to cross-site scripting, enabling JavaScript to be

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-20 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeisle Visualizer allows Stored XSS. This issue affects Visualizer: fro...

CVE-2026-24573

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeisle Visualiz

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-20 发布INFO

The AI Chatbot & Workflow Automation by AIWU plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'X-Forwarded-For' header in versions up to, and including,...

CVE-2026-2955

The AI Chatbot & Workflow Automation by AIWU plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '

历史摘要 · 未重新核验 · NVD

安全公告2026-05-20 发布INFO

mailcow-dockerized contains a stored cross-site scripting vulnerability in the administrator...

CVE-2026-7460

mailcow-dockerized contains a stored cross-site scripting vulnerability in the administrator Queue Manager. The Queue Ma

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-20 发布INFO

mailcow-dockerized contains a stored cross-site scripting vulnerability in the administrator Queue Manager. The Queue Manager fetches mail queue entries from /api/v1/get/mailq/a...

CVE-2026-7460

mailcow-dockerized contains a stored cross-site scripting vulnerability in the administrator Queue Manager. The Queue Ma

历史摘要 · 未重新核验 · NVD

安全公告2026-05-20 发布INFO

The SponsorMe plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via PHP_SELF...

CVE-2026-8626

The SponsorMe plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via PHP_SELF Parameter in all version

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

The LJ comments import: reloaded plugin for WordPress is vulnerable to Reflected Cross-Site...

CVE-2026-8624

The LJ comments import: reloaded plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via PHP_SELF Param

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

The Correct Prices plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ...

CVE-2026-8627

The Correct Prices plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the $_SERVER['PHP_SELF'] var

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

The VatanSMS WP SMS plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ...

CVE-2026-7462

The VatanSMS WP SMS plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `page` parameter in all

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

The Faces of Users plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ...

CVE-2026-8038

The Faces of Users plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'default' shortcode attribu

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

The Logo Manager For Enamad plugin for WordPress is vulnerable to Stored Cross-Site Scripting via...

CVE-2026-6549

The Logo Manager For Enamad plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' attribute

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

The Sticky plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `cvmh-sticky...

CVE-2026-6397

The Sticky plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `cvmh-sticky` shortcode `readmorete

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

The 診断ジェネレータ作成プラグイン (Diagnosis Generator) plugin for WordPress is vulnerable to Stored Cross-Site...

CVE-2026-5293

The 診断ジェネレータ作成プラグイン (Diagnosis Generator) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'js'

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

The Anomify AI – Anomaly Detection and Alerting plugin for WordPress is vulnerable to Stored...

CVE-2026-6404

The Anomify AI – Anomaly Detection and Alerting plugin for WordPress is vulnerable to Stored Cross-Site Scripting via th

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

The General Options plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions...

CVE-2026-6399

The General Options plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 1.

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-20 发布INFO

The Correct Prices plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the $_SERVER['PHP_SELF'] variable in versions up to and including 1.0. This is due to...

CVE-2026-8627

The Correct Prices plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the $_SERVER['PHP_SELF'] var

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-20 发布INFO

The SponsorMe plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via PHP_SELF Parameter in all versions up to, and including, 0.5.2 due to insufficient input s...

CVE-2026-8626

The SponsorMe plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via PHP_SELF Parameter in all version

历史摘要 · 未重新核验 · NVD