#cwe-79

共收录 6044 条相关情报。

← 返回所有主题
漏洞预警2026-05-04 发布MEDIUM

Cross Site Scripting vulnerability in Pluck CMS before v.4.7.21dev allows a remote attacker to escalate privileges via the editpage.php and the sanitizePageContent function

CVE-2026-31205

Cross Site Scripting vulnerability in Pluck CMS before v.4.7.21dev allows a remote attacker to escalate privileges via t

来源摘录 · NVD

漏洞预警2026-05-04 发布INFO

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Tegsoft Management and Information Services Trade Limited Company Online Su...

CVE-2025-14320

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Tegsoft Management

历史摘要 · 未重新核验 · NVD

安全公告2026-05-04 发布INFO

Multiple reflected cross-site scripting (xss) vulnerabilities exist in the Web Interface / ssi...

CVE-2026-42366

Multiple reflected cross-site scripting (xss) vulnerabilities exist in the Web Interface / ssi.cgi functionality of GeoV

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-04 发布INFO

Multiple reflected cross-site scripting (xss) vulnerabilities exist in the Web Interface / ssi...

CVE-2026-7371

Multiple reflected cross-site scripting (xss) vulnerabilities exist in the Web Interface / ssi.cgi functionality of GeoV

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-04 发布INFO

Multiple reflected cross-site scripting (xss) vulnerabilities exist in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted malicious...

CVE-2026-7371

Multiple reflected cross-site scripting (xss) vulnerabilities exist in the Web Interface / ssi.cgi functionality of GeoV

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

Multiple reflected cross-site scripting (xss) vulnerabilities exist in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted malicious...

CVE-2026-42366

Multiple reflected cross-site scripting (xss) vulnerabilities exist in the Web Interface / ssi.cgi functionality of GeoV

历史摘要 · 未重新核验 · NVD

安全公告2026-05-03 发布INFO

The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to Stored...

CVE-2026-5063

The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting vi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-03 发布INFO

A vulnerability was determined in kerwincui FastBee up to 1.2.1. The impacted element is the...

CVE-2026-7677

A vulnerability was determined in kerwincui FastBee up to 1.2.1. The impacted element is the function Add of the file sp

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-03 发布INFO

The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via POST parameter key names in the submit_nex_form() funct...

CVE-2026-5063

The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting vi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-03 发布INFO

A vulnerability was determined in kerwincui FastBee up to 1.2.1. The impacted element is the function Add of the file springboot/fastbee-admin/src/main/java/com/fastbee/web/cont...

CVE-2026-7677

A vulnerability was determined in kerwincui FastBee up to 1.2.1. The impacted element is the function Add of the file sp

历史摘要 · 未重新核验 · NVD

安全公告2026-05-02 发布INFO

The NextMove Lite – Thank You Page for WooCommerce plugin for WordPress is vulnerable to Stored...

CVE-2026-0703

The NextMove Lite – Thank You Page for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-02 发布INFO

The NextMove Lite – Thank You Page for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'xlwcty_current_date' shortcode in all vers...

CVE-2026-0703

The NextMove Lite – Thank You Page for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via

历史摘要 · 未重新核验 · NVD

安全公告2026-05-02 发布INFO

The Premium Addons for Elementor – Powerful Elementor Templates & Widgets plugin for WordPress is...

CVE-2026-4790

The Premium Addons for Elementor – Powerful Elementor Templates & Widgets plugin for WordPress is vulnerable to Stored C

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-02 发布INFO

The Quiz Maker by AYS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ...

CVE-2026-6817

The Quiz Maker by AYS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'rate_reason' parameter

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-02 发布INFO

The Total theme for WordPress is vulnerable to Stored Cross-Site Scripting via post titles in...

CVE-2026-5077

The Total theme for WordPress is vulnerable to Stored Cross-Site Scripting via post titles in versions up to, and includ

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-02 发布INFO

The Quiz Maker by AYS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'rate_reason' parameter in all versions up to, and including, 6.7.1.29 due to ins...

CVE-2026-6817

The Quiz Maker by AYS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'rate_reason' parameter

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-02 发布INFO

The Premium Addons for Elementor – Powerful Elementor Templates & Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'custom_svg' parameter in ver...

CVE-2026-4790

The Premium Addons for Elementor – Powerful Elementor Templates & Widgets plugin for WordPress is vulnerable to Stored C

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-02 发布INFO

The Total theme for WordPress is vulnerable to Stored Cross-Site Scripting via post titles in versions up to, and including, 2.2.1 due to insufficient output escaping when rende...

CVE-2026-5077

The Total theme for WordPress is vulnerable to Stored Cross-Site Scripting via post titles in versions up to, and includ

历史摘要 · 未重新核验 · NVD

安全公告2026-05-02 发布INFO

The Brizy – Page Builder plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site...

CVE-2026-5324

The Brizy – Page Builder plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting in all versio

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-02 发布INFO

The Brizy – Page Builder plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting in all versions up to, and including, 2.8.11 This is due to a combinat...

CVE-2026-5324

The Brizy – Page Builder plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting in all versio

历史摘要 · 未重新核验 · NVD