#cwe-79

共收录 6044 条相关情报。

漏洞预警2025-10-28 发布MEDIUM

A reflected Cross-Site Scripting (XSS) vulnerability has been identified in Clear2Pay Bank Visibility Application - Payment Execution 1.10.0.104 via the ID parameter in the URL.

CVE-2025-61080

A reflected Cross-Site Scripting (XSS) vulnerability has been identified in Clear2Pay Bank Visibility Application - Paym

来源摘录 · NVD

#cve #cwe-79

漏洞预警2025-10-27 发布MEDIUM

Reflected Cross Site Scripting vulnerability in Rubikon Banking Solution 4.0.3 in the "Search For Customers Information" endpoints.

CVE-2025-60983

Reflected Cross Site Scripting vulnerability in Rubikon Banking Solution 4.0.3 in the "Search For Customers Information"

来源摘录 · NVD

#cve #cwe-79

漏洞预警2025-10-27 发布MEDIUM

An XSS issue was discovered in BAE SOCET GXP before 4.6.0.2. The SOCET GXP Job Status Service does not properly sanitize the job ID parameter before using it in the job status p...

CVE-2025-54965

An XSS issue was discovered in BAE SOCET GXP before 4.6.0.2. The SOCET GXP Job Status Service does not properly sanitize

来源摘录 · NVD

#cve #cwe-79

漏洞预警2025-10-27 发布MEDIUM

An issue was discovered in BAE SOCET GXP before 4.6.0.3. It permits external entities in certain XML-based files. An attacker who is able to social engineer a SOCET GXP user int...

CVE-2025-54967

An issue was discovered in BAE SOCET GXP before 4.6.0.3. It permits external entities in certain XML-based files. An att

来源摘录 · NVD

#cve #cwe-79

漏洞预警2025-10-24 发布MEDIUM

Emoncms 11.7.3 is vulnerable to Cross Site in the input handling mechanism. This vulnerability allows authenticated attackers with API access to inject malicious JavaScript code...

CVE-2025-60936

Emoncms 11.7.3 is vulnerable to Cross Site in the input handling mechanism. This vulnerability allows authenticated atta

来源摘录 · NVD

#cve #cwe-79

漏洞预警2025-10-23 发布MEDIUM

Cross Site Scripting (XSS) vulnerability in Gnuboard 5.6.15 allows authenticated attackers to execute arbitrary code via crafted c_id parameter in bbs/view_comment.php.

CVE-2025-60859

Cross Site Scripting (XSS) vulnerability in Gnuboard 5.6.15 allows authenticated attackers to execute arbitrary code via

来源摘录 · NVD

#cve #cwe-79

漏洞预警2025-10-23 发布MEDIUM

A reflected cross-site scripting (XSS) vulnerability in MCMS v6.0.1 allows attackers to execute arbitrary Javascript in the context of a user's browser via a crafted payload.

CVE-2025-60837

A reflected cross-site scripting (XSS) vulnerability in MCMS v6.0.1 allows attackers to execute arbitrary Javascript in

来源摘录 · NVD

#cve #cwe-79

漏洞预警2025-10-23 发布MEDIUM

A stored cross-site scripting (XSS) vulnerability in the /manager/pages component of Piranha CMS v12.0 allows attackers to execute arbitrary web scripts or HTML via creating a p...

CVE-2025-61413

A stored cross-site scripting (XSS) vulnerability in the /manager/pages component of Piranha CMS v12.0 allows attackers

来源摘录 · NVD

#cve #cwe-79

漏洞预警2025-10-23 发布MEDIUM

Cross site scripting (XSS) vulnerability in 17gz International Student service system 1.0 allows attackers to execute arbitrary code via the registration step.

CVE-2025-57240

Cross site scripting (XSS) vulnerability in 17gz International Student service system 1.0 allows attackers to execute ar

来源摘录 · NVD

#cve #cwe-79

漏洞预警2025-10-23 发布MEDIUM

Cross site scripting (XSS) vulnerability in KeeneticOS before 4.3 at "Wireless ISP" page allows attackers located near to the router to takeover the device via adding additional...

CVE-2025-56008

Cross site scripting (XSS) vulnerability in KeeneticOS before 4.3 at "Wireless ISP" page allows attackers located near t

来源摘录 · NVD

#cve #cwe-79

漏洞预警2025-10-21 发布MEDIUM

Bank Locker Management System by PHPGurukul is affected by a Cross-Site Scripting (XSS) vulnerability via the /search parameter, where unsanitized input allows arbitrary HTML an...

CVE-2025-61255

Bank Locker Management System by PHPGurukul is affected by a Cross-Site Scripting (XSS) vulnerability via the /search pa

来源摘录 · NVD

#cve #cwe-79

漏洞预警2025-10-21 发布HIGH

Cross site scripting vulnerability in Moodle GeniAI plugin (local_geniai) 2.3.6. An authenticated user with Teacher role can upload a PDF containing embedded JavaScript. The ass...

CVE-2025-60507

Cross site scripting vulnerability in Moodle GeniAI plugin (local_geniai) 2.3.6. An authenticated user with Teacher role

来源摘录 · NVD

#cve #cwe-79

漏洞预警2025-10-21 发布MEDIUM

Moodle PDF Annotator plugin v1.5 release 9 allows stored cross-site scripting (XSS) via the Public Comments feature. An attacker with a low-privileged account (e.g., Student) ca...

CVE-2025-60506

Moodle PDF Annotator plugin v1.5 release 9 allows stored cross-site scripting (XSS) via the Public Comments feature. An

来源摘录 · NVD

#cve #cwe-79

漏洞预警2025-10-21 发布MEDIUM

Cross-Site Scripting (XSS) vulnerability in Bang Resto v1.0 could allow an attacker to inject malicious JavaScript code into the application's web pages. This vulnerability exis...

CVE-2025-60280

Cross-Site Scripting (XSS) vulnerability in Bang Resto v1.0 could allow an attacker to inject malicious JavaScript code

来源摘录 · NVD

#cve #cwe-79

漏洞预警2025-10-21 发布MEDIUM

Multiple stored cross-site scripting (XSS) vulnerabilities in the Future Goals function of HR Performance Solutions Performance Pro v3.19.17 allows attackers to execute arbitrar...

CVE-2025-60933

Multiple stored cross-site scripting (XSS) vulnerabilities in the Future Goals function of HR Performance Solutions Perf

来源摘录 · NVD

#cve #cwe-79

漏洞预警2025-10-21 发布MEDIUM

Multiple stored cross-site scripting (XSS) vulnerabilities in the Current Goals function of HR Performance Solutions Performance Pro v3.19.17 allows attackers to execute arbitra...

CVE-2025-60932

Multiple stored cross-site scripting (XSS) vulnerabilities in the Current Goals function of HR Performance Solutions Per

来源摘录 · NVD

#cve #cwe-79

漏洞预警2025-10-20 发布MEDIUM

A Cross-Site Scripting (XSS) vulnerability exists in Bhabishya-123 E-commerce 1.0, specifically within the index endpoint. Unsanitized input in the /index parameter is directly ...

CVE-2025-61456

A Cross-Site Scripting (XSS) vulnerability exists in Bhabishya-123 E-commerce 1.0, specifically within the index endpoin

来源摘录 · NVD

#cve #cwe-79

漏洞预警2025-10-20 发布HIGH

Cross-Site Scripting (XSS) vulnerability exists in TastyIgniter 3.7.7, affecting the /admin/media_manager component. Attackers can upload a malicious SVG file containing JavaScr...

CVE-2025-61417

Cross-Site Scripting (XSS) vulnerability exists in TastyIgniter 3.7.7, affecting the /admin/media_manager component. Att

来源摘录 · NVD

#cve #cwe-434 #cwe-79

漏洞预警2025-10-20 发布MEDIUM

A Cross-Site Scripting (XSS) vulnerability exists in Bhabishya-123 E-commerce 1.0, specifically within the search endpoint. Unsanitized input in the /search parameter is directl...

CVE-2025-61454

A Cross-Site Scripting (XSS) vulnerability exists in Bhabishya-123 E-commerce 1.0, specifically within the search endpoi

来源摘录 · NVD

#cve #cwe-79

漏洞预警2025-10-17 发布MEDIUM

CobbleStone Enterprise Contract Management Portal v.22.4.0 is vulnerable to Stored Cross-Site Scripting (XSS) in its chat box component. This allows a remote attacker to execute...

CVE-2025-56320

CobbleStone Enterprise Contract Management Portal v.22.4.0 is vulnerable to Stored Cross-Site Scripting (XSS) in its cha

来源摘录 · NVD

#cve #cwe-79