#cwe-79

共收录 5328 条相关情报。

漏洞预警2026-10-31 发布HIGH

The Meow Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'post_content (bbPress reply body)' parameter in all versions up to, and including, 5...

CVE-2026-109234

The Meow Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'post_content (bbPress reply

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-79 #severity:high

安全公告2026-10-30 发布HIGH

AdminNeo Vulnerable to XSS via Rogue MySQL Server Version String (CSP Nonce Bypass)

CVE-2026-96632

## Summary AdminNeo inserts the database server's version string into a `` tag that carries a valid CSP nonce, without

来源摘录 · GitHub Advisory

#advisory #composer #cwe-79 #severity:high

漏洞预警2026-10-30 发布HIGH

The PDF Invoices & Packing Slips for WooCommerce WordPress plugin from 5.16.2 before 5.16.5 does not properly escape several customer-supplied order fields — including the billi...

CVE-2026-111578

The PDF Invoices & Packing Slips for WooCommerce WordPress plugin from 5.16.2 before 5.16.5 does not properly escape sev

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-79 #severity:high

漏洞预警2026-10-30 发布HIGH

Shopper is a Headless e-commerce Admin Panel. In versions from 2.0.0 prior to 2.10.1 and in the 3.0.0 prereleases beta.1 and beta.2, authenticated back-office staff with a conte...

CVE-2026-62990

Shopper is a Headless e-commerce Admin Panel. In versions from 2.0.0 prior to 2.10.1 and in the 3.0.0 prereleases beta.1

来源摘录 · NVD

#cve #cwe-269 #cwe-79

漏洞预警2026-10-30 发布MEDIUM

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in phoenixframework phoenix_html allows an attacker who controls attribute nam...

CVE-2026-117645

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in phoenixframework p

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-79 #severity:medium

漏洞预警2026-10-30 发布HIGH

Unauthenticated Cross Site Scripting (XSS) in All In One Login <= 2.4.1 versions.

CVE-2026-94175

Unauthenticated Cross Site Scripting (XSS) in All In One Login <= 2.4.1 versions.

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-79 #severity:high

漏洞预警2026-10-30 发布MEDIUM

WIT SynApps Runtime through 1.4.11 contains a pre-authentication reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject and execute arbitra...

CVE-2026-7004

WIT SynApps Runtime through 1.4.11 contains a pre-authentication reflected cross-site scripting vulnerability that allow

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-79 #severity:medium

漏洞预警2026-10-30 发布HIGH

Unauthenticated Cross Site Scripting (XSS) in Profile Builder <= 4.0.5 versions.

CVE-2026-54855

Unauthenticated Cross Site Scripting (XSS) in Profile Builder <= 4.0.5 versions.

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-30 发布HIGH

Unauthenticated Cross Site Scripting (XSS) in Fast Velocity Minify <= 3.5.7 versions.

CVE-2026-48201

Unauthenticated Cross Site Scripting (XSS) in Fast Velocity Minify <= 3.5.7 versions.

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-30 发布HIGH

Unauthenticated Cross Site Scripting (XSS) in BA Book Everything <= 1.8.33 versions.

CVE-2026-39786

Unauthenticated Cross Site Scripting (XSS) in BA Book Everything <= 1.8.33 versions.

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-30 发布MEDIUM

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force Ultimate Addons for Elementor - Lite header-footer-element...

CVE-2026-39739

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force U

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-30 发布HIGH

Unauthenticated Cross Site Scripting (XSS) in VikRentCar <= 1.4.10 versions.

CVE-2026-28160

Unauthenticated Cross Site Scripting (XSS) in VikRentCar <= 1.4.10 versions.

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-30 发布MEDIUM

Subscriber Cross Site Scripting (XSS) in User Registration <= 5.3.0 versions.

CVE-2026-27061

Subscriber Cross Site Scripting (XSS) in User Registration <= 5.3.0 versions.

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-30 发布MEDIUM

Subscriber Cross Site Scripting (XSS) in WP Customer Area <= 8.4.0 versions.

CVE-2026-116854

Subscriber Cross Site Scripting (XSS) in WP Customer Area <= 8.4.0 versions.

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-30 发布HIGH

Unauthenticated Cross Site Scripting (XSS) in eCommerce Product Catalog <= 3.6.5 versions.

CVE-2026-116851

Unauthenticated Cross Site Scripting (XSS) in eCommerce Product Catalog <= 3.6.5 versions.

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-30 发布HIGH

Unauthenticated Cross Site Scripting (XSS) in Mang Board WP <= 2.4.6 versions.

CVE-2026-116847

Unauthenticated Cross Site Scripting (XSS) in Mang Board WP <= 2.4.6 versions.

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-30 发布HIGH

Unauthenticated Cross Site Scripting (XSS) in VikRentCar <= 1.4.9 versions.

CVE-2026-116405

Unauthenticated Cross Site Scripting (XSS) in VikRentCar <= 1.4.9 versions.

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-30 发布MEDIUM

Subscriber Cross Site Scripting (XSS) in MultiVendorX <= 5.0.20 versions.

CVE-2026-114711

Subscriber Cross Site Scripting (XSS) in MultiVendorX <= 5.0.20 versions.

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-30 发布HIGH

Unauthenticated Cross Site Scripting (XSS) in Ad Inserter <= 2.8.19 versions.

CVE-2026-105077

Unauthenticated Cross Site Scripting (XSS) in Ad Inserter <= 2.8.19 versions.

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-30 发布MEDIUM

The Meow Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Attachment Alt Text (aria-label attribute) in all versions up to, and including, 5.5.1 due...

CVE-2026-9239

The Meow Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Attachment Alt Text (aria-label a

来源摘录 · NVD

#cve #cwe-79