LibreNMS: Cross-Site Scripting in ShowConfigController
CVE-2026-2728
### Summary A Stored Cross-Site Scripting (XSS) vulnerability exists in the ShowConfig page of devices affected by the R
#cwe-79
共收录 5879 条相关情报。
← 返回所有主题CI4MS: Stored XSS in Pages Module Content via Broken html_purify Validation Rule
CVE-2026-45270
## Summary The `Pages` backend module registers the `html_purify` validation rule on language-keyed page content but pe
CI4MS: Stored XSS in Blog Content via Broken `html_purify` Validation Rule
CVE-2026-45138
## Summary The custom `html_purify` validation rule used to sanitize blog post bodies relies on by-reference mutation (
Improper neutralization of input during web page generation ('cross-site scripting')...
CVE-2026-7498
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Basamak Informatio
Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13 fail to escape some variables that...
CVE-2026-3495
Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13 fail to escape some variables that could contain malicious con
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Basamak Information Technology Consulting and Organization Trade Ltd. Co. D...
CVE-2026-7498
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Basamak Informatio
Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13 fail to escape some variables that could contain malicious content during error page composition which allows an attack...
CVE-2026-3495
Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13 fail to escape some variables that could contain malicious con
The Ajax Load More WordPress plugin before 7.8.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting whi...
CVE-2026-6495
The Ajax Load More WordPress plugin before 7.8.4 does not sanitise and escape a parameter before outputting it back in
The Autoptimize WordPress plugin before 3.1.15, Clearfy Cache WordPress plugin before 2.4.2, Speed Optimizer WordPress plugin before 7.7.9 are vulnerable to unauthenticated St...
CVE-2026-3220
The Autoptimize WordPress plugin before 3.1.15, Clearfy Cache WordPress plugin before 2.4.2, Speed Optimizer WordPress
Zenar Content Management System contains a cross-site scripting vulnerability that allows...
CVE-2018-25331
Zenar Content Management System contains a cross-site scripting vulnerability that allows unauthenticated attackers to i
Quick.CMS 6.7 contains a cross-site scripting vulnerability in the sliders form that allows...
CVE-2021-47981
Quick.CMS 6.7 contains a cross-site scripting vulnerability in the sliders form that allows authenticated attackers to i
Cookie Law Bar 1.2.1 contains a stored cross-site scripting vulnerability that allows...
CVE-2021-47957
Cookie Law Bar 1.2.1 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject
CouchCMS 2.2.1 contains a cross-site scripting vulnerability that allows authenticated attackers...
CVE-2021-47955
CouchCMS 2.2.1 contains a cross-site scripting vulnerability that allows authenticated attackers to execute arbitrary Ja
WP Learn Manager 1.1.2 contains a stored cross-site scripting vulnerability that allows...
CVE-2021-47975
WP Learn Manager 1.1.2 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inj
Supsystic Digital Publications 1.6.9 contains a path traversal vulnerability in the Folder input...
CVE-2020-37245
Supsystic Digital Publications 1.6.9 contains a path traversal vulnerability in the Folder input field that allows attac
MyBB Timeline Plugin 1.0 contains cross-site scripting vulnerabilities that allow attackers to...
CVE-2021-47934
MyBB Timeline Plugin 1.0 contains cross-site scripting vulnerabilities that allow attackers to inject malicious scripts
WordPress Theme Wibar 1.1.8 contains a stored cross-site scripting vulnerability in the Brand...
CVE-2020-37235
WordPress Theme Wibar 1.1.8 contains a stored cross-site scripting vulnerability in the Brand component that allows auth
CMS Made Simple 2.2.15 contains a stored cross-site scripting vulnerability that allows...
CVE-2020-37238
CMS Made Simple 2.2.15 contains a stored cross-site scripting vulnerability that allows authenticated users with Content
NewsLister contains an authenticated persistent cross-site scripting vulnerability that allows...
CVE-2020-37236
NewsLister contains an authenticated persistent cross-site scripting vulnerability that allows authenticated administrat
WordPress Plugin Buddypress 6.2.0 contains a persistent cross-site scripting vulnerability that...
CVE-2020-37233
WordPress Plugin Buddypress 6.2.0 contains a persistent cross-site scripting vulnerability that allows authenticated att