共收录 6044 条相关情报。
← 返回所有主题CVE-2021-47925
CMDBuild 3.3.2 contains multiple stored cross-site scripting vulnerabilities that allow authenticated attackers to injec
CVE-2021-47924
Ultimate Product Catalog 5.8.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers
CVE-2021-47922
Slider by Soliloquy 2.6.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to in
CVE-2021-47910
AccessPress Social Icons 1.8.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers
CVE-2021-47907
Rocket LMS 1.1 contains a persistent cross-site scripting vulnerability in the support ticket module that allows authent
CVE-2026-6735
In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, 8.5.* before 8.5.6, due to improper sanit
CVE-2026-8220
A vulnerability was detected in Devs Palace ERP Online up to 4.0.0. This affects an unknown function of the file /invent
CVE-2026-8221
A flaw has been found in Devs Palace ERP Online up to 4.0.0. This impacts an unknown function of the file /inventory/ite
CVE-2026-8219
A security vulnerability has been detected in Devs Palace ERP Online up to 4.0.0. The impacted element is an unknown fun
CVE-2026-8218
A weakness has been identified in Devs Palace ERP Online up to 4.0.0. The affected element is an unknown function of the
CVE-2026-8221
该漏洞影响 Devs Palace ERP Online 至 4.0.0 版本。问题存在于 /inventory/item-save 文件中的未知功能，导致跨站脚本（XSS）漏洞。攻击者可通过远程方式利用此漏洞，但需要高权限（PR:H）并诱
CVE-2026-8220
该漏洞影响 Devs Palace ERP Online 版本 4.0.0 及更早版本。问题存在于文件 /inventory/customer-save 的未知函数中，攻击者可以通过远程方式操纵该函数，导致跨站脚本攻击（XSS）。尽管 CV
CVE-2026-8219
Devs Palace ERP Online 至 4.0.0 版本存在跨站脚本（XSS）漏洞，该漏洞位于 /inventory/supplier-save 文件的未知函数中。攻击者可以通过远程方式利用该漏洞，但需要高权限用户交互（UI:R）
CVE-2026-8218
Devs Palace ERP Online 至 4.0.0 版本中存在一个跨站脚本（XSS）漏洞，具体位于 /inventory/purchase_return_save 文件中的未知函数。攻击者可通过远程方式利用该漏洞，向受影响页面注入
CVE-2026-8195
A vulnerability was detected in JeecgBoot up to 3.9.1. The affected element is an unknown function of the file jeecg-mod
CVE-2026-8195
CVE-2026-8195 影响 JeecgBoot 至 3.9.1 版本。该漏洞位于 jeecg-module-system/jeecg-system-biz/src/main/java/org/jeecg/modules/system/
CVE-2026-42455
Linkwarden 是一款自托管的开源协作书签管理器，用于收集、组织和归档网页。在 2.14.0 及之前版本中，归档上传端点（POST /api/v1/archives/[linkId]?format=4）接受 HTML 文件（text/
CVE-2026-44897
## Summary `HTMLRenderer.heading()` builds the opening `` tag by string-concatenating the `id` attribute value directly
CVE-2026-44896
In `src/mistune/directives/image.py`, the `render_figure()` function concatenates `figclass` and `figwidth` options dire
CVE-2026-44708
## Summary The mistune math plugin renders inline math (`$...$`) and block math (`$$...$$`) by concatenating the raw use