#cwe-79

共收录 5879 条相关情报。

← 返回所有主题
漏洞预警2026-05-15 发布INFO

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.0, the profile_image_url field on the user profile update form ac...

CVE-2026-45299

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.0, the p

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-15 发布INFO

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.0, Excel file attachments are previewed in an unsafe way. A craft...

CVE-2026-44549

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.0, Excel

历史摘要 · 未重新核验 · NVD

安全公告2026-05-15 发布INFO

phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in FAQ creation and...

CVE-2026-46363

phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in FAQ creation and update endpoints that byp

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-15 发布INFO

PHP Timeclock 1.04 contains multiple cross-site scripting vulnerabilities that allow...

CVE-2021-47967

PHP Timeclock 1.04 contains multiple cross-site scripting vulnerabilities that allow unauthenticated attackers to inject

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-15 发布INFO

phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in search.twig where...

CVE-2026-46361

phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in search.twig where result.question and resu

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-15 发布INFO

Savsoft Quiz 5.0 contains a persistent cross-site scripting vulnerability in the user account...

CVE-2021-47962

Savsoft Quiz 5.0 contains a persistent cross-site scripting vulnerability in the user account settings page that allows

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-15 发布INFO

phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in SvgSanitizer:...

CVE-2026-46360

phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in SvgSanitizer::decodeAllEntities() that lim

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-15 发布INFO

phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in Utils::parseUrl()...

CVE-2026-46367

phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in Utils::parseUrl() that allows authenticate

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-15 发布INFO

Anote 1.0 contains a persistent cross-site scripting vulnerability that allows attackers to...

CVE-2021-47963

Anote 1.0 contains a persistent cross-site scripting vulnerability that allows attackers to execute arbitrary code by in

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-15 发布INFO

Podcast Generator 3.1 contains a persistent cross-site scripting vulnerability that allows...

CVE-2021-47968

Podcast Generator 3.1 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to in

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-15 发布INFO

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, a stored cross-site scripting (XSS) vulnerability that allows ...

CVE-2026-44721

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, a sto

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-15 发布INFO

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the AccountPending.svelte component renders the admin-configur...

CVE-2026-44568

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the A

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-15 发布INFO

phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in Utils::parseUrl() that allows authenticated users to inject JavaScript via malformed URLs in commen...

CVE-2026-46367

phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in Utils::parseUrl() that allows authenticate

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-15 发布INFO

phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in FAQ creation and update endpoints that bypass sanitization through encode-decode cycles. The vulner...

CVE-2026-46363

phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in FAQ creation and update endpoints that byp

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-15 发布INFO

phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in search.twig where result.question and result.answerPreview are rendered with the raw filter, disabl...

CVE-2026-46361

phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in search.twig where result.question and resu

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-15 发布INFO

phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in SvgSanitizer::decodeAllEntities() that limits recursive entity decoding to 5 iterations, allowing a...

CVE-2026-46360

phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in SvgSanitizer::decodeAllEntities() that lim

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-15 发布INFO

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.3, there is an unauthenticated reflected cross-site script...

CVE-2026-45622

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.3

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-15 发布INFO

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.3, This vulnerability is fixed in 1.0.8.3.

CVE-2026-45616

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.3

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-15 发布INFO

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.1, a Stored Cross-Site Scripting (XSS) vulnerability exist...

CVE-2026-44366

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.1

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-15 发布INFO

Podcast Generator 3.1 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting unfiltered JavaScrip...

CVE-2021-47968

Podcast Generator 3.1 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to in

历史摘要 · 未重新核验 · NVD