#cwe-79

共收录 5906 条相关情报。

漏洞预警2026-05-13 发布INFO

Kuicms Php EE 2.0 contains a persistent cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting crafted content throug...

CVE-2020-37222

Kuicms Php EE 2.0 contains a persistent cross-site scripting vulnerability that allows unauthenticated attackers to inje

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-05-13 发布INFO

WOOF Products Filter for WooCommerce 1.2.3 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by entering X...

CVE-2020-37174

WOOF Products Filter for WooCommerce 1.2.3 contains a persistent cross-site scripting vulnerability that allows authenti

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

安全公告2026-05-13 发布INFO

SiYuan Bazaar marketplace renders unescaped package `name` and `version` metadata, allowing stored XSS and Electron code execution

CVE-2026-45375

### Summary SiYuan's Bazaar (community marketplace) renders the `name` and `version` fields of a package's `plugin.json

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-79 #cwe-116 #severity:critical

漏洞预警2026-05-13 发布INFO

The Custom Twitter Feeds plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 2.5.4. This is due to insufficient output escaping in ...

CVE-2026-6177

The Custom Twitter Feeds plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and includi

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-05-13 发布INFO

Stored cross-site scripting vulnerability exists in ELECOM wireless LAN access point devices. If one of the administrators input malicious data, an arbitrary script may be execu...

CVE-2026-42948

Stored cross-site scripting vulnerability exists in ELECOM wireless LAN access point devices. If one of the administrato

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-05-13 发布INFO

The Snow Monkey Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data-slick' attribute in all versions up to, and including, 24.1.11 due to insu...

CVE-2026-3004

The Snow Monkey Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data-slick' attribute

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-05-13 发布INFO

The WPC Badge Management for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'text' attribute of the `wpcbm_best_seller` shortcode in all v...

CVE-2025-14767

The WPC Badge Management for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'text

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-05-13 发布INFO

The Cost of Goods: Product Cost & Profit Calculator for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'alg_wc_cog_product_cost' ...

CVE-2026-6962

The Cost of Goods: Product Cost & Profit Calculator for WooCommerce plugin for WordPress is vulnerable to Stored Cross-S

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-05-13 发布INFO

The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'permission_...

CVE-2026-6828

The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulne

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-05-13 发布INFO

The Broadstreet plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.53.1 due to insufficient input sanit...

CVE-2025-9989

The Broadstreet plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-05-12 发布INFO

Kyverno is a policy engine designed for cloud native platform engineering teams. Prior to 2.5.2, Vue 3's v-html directive is the framework-documented mechanism for injecting raw...

CVE-2026-44245

Kyverno is a policy engine designed for cloud native platform engineering teams. Prior to 2.5.2, Vue 3's v-html directiv

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-05-12 发布INFO

Flowsint is an open-source OSINT graph exploration tool designed for cybersecurity investigation, transparency, and verification. Prior to 1.2.3, a remote attacker can create a ...

CVE-2026-42157

Flowsint is an open-source OSINT graph exploration tool designed for cybersecurity investigation, transparency, and veri

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

安全公告2026-05-12 发布INFO

SillyTavern has a reflected XSS vulnerability in the CORS proxy middleware

CVE-2026-44651

## Resolution Fixed in SillyTavern 1.18.0: a user-provided URL is no longer reflected in the HTTP response body. ## Ov

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #npm #cwe-79 #severity:medium

安全公告2026-05-12 发布INFO

Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and...

CVE-2026-34686

Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by a s

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-79 #severity:high

安全公告2026-05-12 发布INFO

Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and...

CVE-2026-34655

Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by a s

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-79 #severity:medium

安全公告2026-05-12 发布INFO

Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and...

CVE-2026-34658

Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by a s

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-79 #severity:medium

安全公告2026-05-12 发布INFO

A vulnerability in the web-based management interface of Access Points running AOS-10 and AOS-8...

CVE-2026-23819

A vulnerability in the web-based management interface of Access Points running AOS-10 and AOS-8 Instant could allow an u

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-79 #severity:high

漏洞预警2026-05-12 发布INFO

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.1.1, Address6.group() and Address6.link() do not HTML-escape attacker-con...

CVE-2026-42338

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.1.1, Address6.gr

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-05-12 发布INFO

Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could...

CVE-2026-34686

Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by a s

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-05-12 发布INFO

Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could...

CVE-2026-34658

Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by a s

历史摘要 · 未重新核验 · NVD

#cve #cwe-79