#cwe-79

共收录 5955 条相关情报。

← 返回所有主题
漏洞预警2026-05-11 发布MEDIUM

A reflected cross-site scripted (XSS) vulnerability in the dfm-menu_firmware.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers to execute a...

CVE-2025-61305

A reflected cross-site scripted (XSS) vulnerability in the dfm-menu_firmware.php component of GmbH Mecury Managed Print

来源摘录 · NVD

漏洞预警2026-05-11 发布INFO

ATutor is vulnerable to Reflected XSS in /install/install.php endpoint. An attacker can provide a specially crafted URL that, when opened, results in arbitrary JavaScript execut...

CVE-2026-6956

ATutor is vulnerable to Reflected XSS in /install/install.php endpoint. An attacker can provide a specially crafted URL

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-11 发布INFO

ATutor is vulnerable to Reflected XSS in /install/upgrade.php endpoint. An attacker can provide a specially crafted URL that, when opened, results in arbitrary JavaScript execut...

CVE-2026-6909

ATutor is vulnerable to Reflected XSS in /install/upgrade.php endpoint. An attacker can provide a specially crafted URL

历史摘要 · 未重新核验 · NVD

安全公告2026-05-11 发布INFO

A vulnerability was identified in Devs Palace ERP Online up to 4.0.0. This impacts an unknown...

CVE-2026-8262

A vulnerability was identified in Devs Palace ERP Online up to 4.0.0. This impacts an unknown function of the file /acco

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-11 发布INFO

A security vulnerability has been detected in Devs Palace ERP Online up to 4.0.0. This...

CVE-2026-8256

A security vulnerability has been detected in Devs Palace ERP Online up to 4.0.0. This vulnerability affects unknown cod

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-11 发布INFO

A vulnerability was identified in Devs Palace ERP Online up to 4.0.0. This impacts an unknown function of the file /accounts/chart-save. Such manipulation leads to cross site sc...

CVE-2026-8262

A vulnerability was identified in Devs Palace ERP Online up to 4.0.0. This impacts an unknown function of the file /acco

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-11 发布INFO

A security vulnerability has been detected in Devs Palace ERP Online up to 4.0.0. This vulnerability affects unknown code of the file /accounts/mr-save. Such manipulation leads ...

CVE-2026-8256

A security vulnerability has been detected in Devs Palace ERP Online up to 4.0.0. This vulnerability affects unknown cod

历史摘要 · 未重新核验 · NVD

安全公告2026-05-11 发布INFO

A weakness has been identified in Devs Palace ERP Online up to 4.0.0. This affects an unknown...

CVE-2026-8255

A weakness has been identified in Devs Palace ERP Online up to 4.0.0. This affects an unknown part of the file /inventor

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-11 发布INFO

A security flaw has been discovered in Devs Palace ERP Online up to 4.0.0. Affected by this issue...

CVE-2026-8254

A security flaw has been discovered in Devs Palace ERP Online up to 4.0.0. Affected by this issue is some unknown functi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-11 发布INFO

A vulnerability was identified in Devs Palace ERP Online up to 4.0.0. Affected by this...

CVE-2026-8253

A vulnerability was identified in Devs Palace ERP Online up to 4.0.0. Affected by this vulnerability is an unknown funct

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-11 发布INFO

A weakness has been identified in Devs Palace ERP Online up to 4.0.0. This affects an unknown part of the file /inventory/add_new_customer. This manipulation causes cross site s...

CVE-2026-8255

A weakness has been identified in Devs Palace ERP Online up to 4.0.0. This affects an unknown part of the file /inventor

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-11 发布INFO

A security flaw has been discovered in Devs Palace ERP Online up to 4.0.0. Affected by this issue is some unknown functionality of the file /inventory/sales_save. The manipulati...

CVE-2026-8254

A security flaw has been discovered in Devs Palace ERP Online up to 4.0.0. Affected by this issue is some unknown functi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-11 发布INFO

A vulnerability was identified in Devs Palace ERP Online up to 4.0.0. Affected by this vulnerability is an unknown functionality of the file /inventory/purchase_save. The manipu...

CVE-2026-8253

A vulnerability was identified in Devs Palace ERP Online up to 4.0.0. Affected by this vulnerability is an unknown funct

历史摘要 · 未重新核验 · NVD

安全公告2026-05-10 发布INFO

uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the auctions/manage...

CVE-2022-50968

uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the auctions/manage module. The date_create

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-10 发布INFO

uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the backend...

CVE-2022-50969

uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the backend/mailingLog/manage module. The d

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-10 发布INFO

WordPress Plugin AAWP 3.16 contains a reflected cross-site scripting vulnerability that allows...

CVE-2022-50970

WordPress Plugin AAWP 3.16 contains a reflected cross-site scripting vulnerability that allows authenticated attackers t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-10 发布INFO

uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the news/manage...

CVE-2022-50966

uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the news/manage module. The date_created, d

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-10 发布INFO

Projectsend r1295 contains a stored cross-site scripting vulnerability that allows authenticated...

CVE-2021-47947

Projectsend r1295 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject mal

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-10 发布INFO

WordPress Plugin Testimonial Slider and Showcase 2.2.6 contains a stored cross-site scripting...

CVE-2022-50947

WordPress Plugin Testimonial Slider and Showcase 2.2.6 contains a stored cross-site scripting vulnerability that allows

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-10 发布INFO

uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the orders/myOrders...

CVE-2022-50962

uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the orders/myOrders module. The date_create

历史摘要 · 未重新核验 · GitHub Advisory