#cwe-79

共收录 6044 条相关情报。

漏洞预警2026-05-10 发布INFO

uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the auctions/myAuctions/status/active module. The date_created, date_from, date_to, and created_at p...

CVE-2022-50963

uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the auctions/myAuctions/status/active modul

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-05-10 发布INFO

uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the orders/myOrders module. The date_created, date_from, date_to, and created_at parameters in the f...

CVE-2022-50962

uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the orders/myOrders module. The date_create

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-05-10 发布INFO

WordPress Plugin IP2Location Country Blocker 2.26.7 contains a stored cross-site scripting vulnerability that allows authenticated users to inject arbitrary JavaScript code thro...

CVE-2022-50961

WordPress Plugin IP2Location Country Blocker 2.26.7 contains a stored cross-site scripting vulnerability that allows aut

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-05-10 发布INFO

WordPress International Sms For Contact Form 7 Integration version 1.2 contains a reflected cross-site scripting vulnerability in the page parameter of the admin settings interf...

CVE-2022-50960

WordPress International Sms For Contact Form 7 Integration version 1.2 contains a reflected cross-site scripting vulnera

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-05-10 发布INFO

WordPress Contact Form Builder 1.6.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by exploiting the ...

CVE-2022-50959

WordPress Contact Form Builder 1.6.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-05-10 发布INFO

WordPress Plugin Jetpack 9.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the post_i...

CVE-2022-50958

WordPress Plugin Jetpack 9.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attacke

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-05-10 发布INFO

Drupal avatar_uploader 7.x-1.0-beta8 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating th...

CVE-2022-50957

Drupal avatar_uploader 7.x-1.0-beta8 contains a reflected cross-site scripting vulnerability that allows unauthenticated

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-05-10 发布INFO

WordPress Plugin Videos sync PDF 1.7.4 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by exploiting unsanit...

CVE-2022-50949

WordPress Plugin Videos sync PDF 1.7.4 contains a stored cross-site scripting vulnerability that allows authenticated at

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-05-10 发布INFO

Motopress Hotel Booking Lite 4.2.4 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting payloads in...

CVE-2022-50948

Motopress Hotel Booking Lite 4.2.4 contains a stored cross-site scripting vulnerability that allows authenticated attack

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-05-10 发布INFO

WordPress Plugin Testimonial Slider and Showcase 2.2.6 contains a stored cross-site scripting vulnerability that allows authenticated editors to inject malicious scripts by fail...

CVE-2022-50947

WordPress Plugin Testimonial Slider and Showcase 2.2.6 contains a stored cross-site scripting vulnerability that allows

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-05-10 发布INFO

WordPress Plugin Netroics Blog Posts Grid 1.0 contains a stored cross-site scripting vulnerability that allows authenticated editors to inject malicious scripts by failing to sa...

CVE-2022-50946

WordPress Plugin Netroics Blog Posts Grid 1.0 contains a stored cross-site scripting vulnerability that allows authentic

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-05-10 发布INFO

WordPress 3dady real-time web stats plugin 1.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious JavaScript by exploit...

CVE-2022-50945

WordPress 3dady real-time web stats plugin 1.0 contains a stored cross-site scripting vulnerability that allows authenti

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-05-10 发布INFO

Moodle LMS 4.0 contains a cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting payloads through the search paramete...

CVE-2022-50943

Moodle LMS 4.0 contains a cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious s

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-05-10 发布INFO

WordPress Picture Gallery 1.4.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the Edit Content URL...

CVE-2021-47951

WordPress Picture Gallery 1.4.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-05-10 发布INFO

Advanced Guestbook 2.4.4 contains a persistent cross-site scripting vulnerability in the smilies administration interface that allows authenticated attackers to inject malicious...

CVE-2021-47950

Advanced Guestbook 2.4.4 contains a persistent cross-site scripting vulnerability in the smilies administration interfac

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-05-10 发布INFO

Projectsend r1295 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting crafted input in the 'name' ...

CVE-2021-47947

Projectsend r1295 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject mal

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-05-10 发布INFO

Exponent CMS 2.6 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the Title and Text Block parameters...

CVE-2021-47931

Exponent CMS 2.6 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject mali

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-05-10 发布INFO

Filterable Portfolio Gallery 1.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious JavaScript by entering payloads in ...

CVE-2021-47929

Filterable Portfolio Gallery 1.0 contains a stored cross-site scripting vulnerability that allows authenticated attacker

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-05-10 发布INFO

WordPress Plugin WP Symposium Pro 2021.10 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by exploiting insu...

CVE-2021-47927

WordPress Plugin WP Symposium Pro 2021.10 contains a stored cross-site scripting vulnerability that allows authenticated

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-05-10 发布INFO

Contact Form to Email 1.3.24 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by creating forms with script t...

CVE-2021-47926

Contact Form to Email 1.3.24 contains a stored cross-site scripting vulnerability that allows authenticated attackers to

历史摘要 · 未重新核验 · NVD

#cve #cwe-79