共收录 5343 条相关情报。
← 返回所有主题CVE-2026-112951
ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, the color field accepts trailing con
CVE-2026-112840
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force S
CVE-2026-111843
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CozyThemes Rootblo
CVE-2026-112833
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Castos Seriously S
CVE-2026-18205
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Ticimax Informatic
CVE-2026-14933
Cross-site scripting in the embedded co-browsing feature in Unblu inc. Unblu Spark 7.0 through 7.57.7 and 8.0 through 8.
CVE-2026-113583
Cypht webmail 2.0.0 through 2.12.2 contains a DOM-based cross-site scripting vulnerability that allows remote attackers
CVE-2026-113383
A vulnerability was detected in Optimal IdM OptimalCloud 5.0. This affects an unknown part of the file /v5.0/webapps/pag
CVE-2026-113355
Chatwoot before 4.14.0 contains a stored cross-site scripting vulnerability that allows account administrators to inject
CVE-2026-113350
react-admin before 5.15.5 contains a stored cross-site scripting vulnerability that allows attackers to inject scripts b
CVE-2026-113442
Values entered by visitors were placed into the HTML summary email without being escaped. An unauthenticated attacker co
CVE-2026-111844
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brizy Brizy brizy
CVE-2026-11960
Enumeration of unauthenticated users in FacturaScripts, version 2025.61. The application returns different responses whe
CVE-2026-11959
Stored Cross-Site Scripting (XSS) in FacturaScripts, version 2025.61, caused by a lack of adequate validation or sanitis
CVE-2026-113465
It is possible to execute a DOM-based Cross-Site Scripting attack against Stormshield’s web administration panel. To
CVE-2026-93878
The DiviGear Carousel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via update_license AJAX Action i
CVE-2026-112148
A vulnerability has been identified in LIFF SDK versions 2.20.0 through 2.31.0, where a DOM-based cross-site scripting (
CVE-2026-112247
A weakness has been identified in Wuxi Wubang Security Software Five-in-One Safety Production Management Information Sys
CVE-2023-38375
IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embe
CVE-2026-111059
## Summary Mercury turns Jupyter notebooks into shared web apps/dashboards. The `mr.Markdown` widget converts its input