#cwe-79

共收录 5345 条相关情报。

漏洞预警2026-10-12 发布INFO

A vulnerability was detected in Netis WF2409E 3.3.42541. This affects an unknown function of the component Wireless Settings. The manipulation of the argument SSID results in cr...

CVE-2026-108898

A vulnerability was detected in Netis WF2409E 3.3.42541. This affects an unknown function of the component Wireless Sett

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-10-12 发布INFO

A vulnerability was detected in Cairo-dock Glx-Dock up to 3.4.0. This issue affects some unknown processing of the file ww_page.php of the component Query Parameter Handler. Per...

CVE-2026-108834

A vulnerability was detected in Cairo-dock Glx-Dock up to 3.4.0. This issue affects some unknown processing of the file

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-10-12 发布INFO

A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute arbitrary script code in user's b...

CVE-2026-105410

A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-12 发布INFO

A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute arbitrary script code in user's b...

CVE-2026-105409

A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-12 发布INFO

A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute arbitrary script code in user's b...

CVE-2026-105408

A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-12 发布INFO

A vulnerability has been found in idcCMS 1.70. Affected is an unknown function of the file admin/member_deal.php. The manipulation leads to cross site scripting. The attack can ...

CVE-2026-108815

A vulnerability has been found in idcCMS 1.70. Affected is an unknown function of the file admin/member_deal.php. The ma

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-10-12 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DLX Plugins Custom Query Blocks post-type-archive-mapping allows Stored XSS...

CVE-2026-108168

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DLX Plugins Custom

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-12 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetElements For Elementor jet-elements allows Stored XSS.This is...

CVE-2026-107866

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetElem

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-12 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetMenu jet-menu allows Stored XSS.This issue affects JetMenu: f...

CVE-2026-107865

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetMenu

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-12 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Igor Funa Ad Inserter ad-inserter allows Stored XSS.This issue affects Ad I...

CVE-2026-107864

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Igor Funa Ad Inser

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-12 发布INFO

An OTRS administrator can enter arbitrary JavaScript into the content of an OTRS Custom Page, which is stored by the application and subsequently executed in the browser of user...

CVE-2026-48212

An OTRS administrator can enter arbitrary JavaScript into the content of an OTRS Custom Page, which is stored by the app

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-12 发布INFO

A weakness has been identified in y_project RuoYi up to 4.8.3. This affects the function renderDrawer of the file /system/dict/data/add of the component Dictionary Data Drawer P...

CVE-2026-108802

A weakness has been identified in y_project RuoYi up to 4.8.3. This affects the function renderDrawer of the file /syste

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-10-12 发布INFO

The HireZoot WordPress plugin before 4.0.0 does not sanitise and escape one of its job specification settings before it is reflected back into an admin-area settings page, allo...

CVE-2025-15703

The HireZoot WordPress plugin before 4.0.0 does not sanitise and escape one of its job specification settings before it

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

安全公告2026-10-11 发布INFO

Deep Chat through 2.5.1 contains a cross-site scripting vulnerability that allows attackers to...

CVE-2026-108852

Deep Chat through 2.5.1 contains a cross-site scripting vulnerability that allows attackers to inject javascript: links

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-79 #severity:low

漏洞预警2026-10-11 发布INFO

Deep Chat through 2.5.1 contains a cross-site scripting vulnerability that allows attackers to inject javascript: links because RemarkableConfig.createNew disables Remarkable li...

CVE-2026-108852

Deep Chat through 2.5.1 contains a cross-site scripting vulnerability that allows attackers to inject javascript: links

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

安全公告2026-10-11 发布INFO

Deep Chat through 2.5.1 XSS via Markdown Link Validation Bypass

CVE-2026-108852

Deep Chat through 2.5.1 contains a cross-site scripting vulnerability that allows attackers to inject javascript: links

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-79

漏洞预警2026-10-11 发布INFO

Cheshire Cat AI core through 2.0.23 contains a stored cross-site scripting vulnerability in the uploads plugin that allows authenticated users to upload HTML files via POST /upl...

CVE-2026-108725

Cheshire Cat AI core through 2.0.23 contains a stored cross-site scripting vulnerability in the uploads plugin that allo

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-11 发布INFO

open-computer-use through commit 610bac8 contains a stored cross-site scripting vulnerability in Logger.write_log_file in os_computer_use/logging.py, which writes transcript tex...

CVE-2026-108722

open-computer-use through commit 610bac8 contains a stored cross-site scripting vulnerability in Logger.write_log_file i

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

安全公告2026-10-11 发布INFO

Cheshire Cat AI core through 2.0.23 Stored XSS via uploads plugin

CVE-2026-108725

Cheshire Cat AI core through 2.0.23 contains a stored cross-site scripting vulnerability in the uploads plugin that allo

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-79

安全公告2026-10-11 发布INFO

open-computer-use through commit 610bac8 Stored XSS via log.html Session Log

CVE-2026-108722

open-computer-use through commit 610bac8 contains a stored cross-site scripting vulnerability in Logger.write_log_file i

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-79