#cwe-79

共收录 5345 条相关情报。

← 返回所有主题
安全公告2026-10-09 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...

CVE-2026-42695

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FolioVision FV Flo

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-09 发布INFO

AstronRPA through 1.1.6 contains a cross-site scripting vulnerability in the desktop client's...

CVE-2026-108159

AstronRPA through 1.1.6 contains a cross-site scripting vulnerability in the desktop client's smart-component chat that

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-09 发布INFO

Moderator Toolbox (reddit-moderator-toolbox) before 4.0.14 contains a stored cross-site scripting...

CVE-2016-20098

Moderator Toolbox (reddit-moderator-toolbox) before 4.0.14 contains a stored cross-site scripting vulnerability in the r

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-09 发布INFO

SmarterMail before build 9777 contains a stored mutation cross-site scripting vulnerability that...

CVE-2026-104083

SmarterMail before build 9777 contains a stored mutation cross-site scripting vulnerability that allows remote attackers

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-09 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FolioVision FV Flowplayer Video Player fv-wordpress-flowplayer allows Store...

CVE-2026-42695

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FolioVision FV Flo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

AstronRPA through 1.1.6 contains a cross-site scripting vulnerability in the desktop client's smart-component chat that allows remote attackers to execute OS commands by abusing...

CVE-2026-108159

AstronRPA through 1.1.6 contains a cross-site scripting vulnerability in the desktop client's smart-component chat that

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

Moderator Toolbox (reddit-moderator-toolbox) before 4.0.14 contains a stored cross-site scripting vulnerability in the removalreasons module, which inserts subreddit toolbox wik...

CVE-2016-20098

Moderator Toolbox (reddit-moderator-toolbox) before 4.0.14 contains a stored cross-site scripting vulnerability in the r

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

SmarterMail before build 9777 contains a stored mutation cross-site scripting vulnerability that allows remote attackers to inject executable script by placing payloads inside a...

CVE-2026-104083

SmarterMail before build 9777 contains a stored mutation cross-site scripting vulnerability that allows remote attackers

历史摘要 · 未重新核验 · NVD

安全公告2026-10-09 发布INFO

AstronRPA through 1.1.6 RCE via Smart-Component Chat XSS and IPC Bridge

CVE-2026-108159

AstronRPA through 1.1.6 contains a cross-site scripting vulnerability in the desktop client's smart-component chat that

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-09 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SpabRice Pond pond allows Reflected XSS.This issue affects Pond: from n/a t...

CVE-2026-94066

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SpabRice Pond pond

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeREX Education Center education allows Reflected XSS.This issue affects...

CVE-2026-94063

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeREX Education

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in TMT Machinery Industry and Trade Co. Ltd. Talassoft Industrial Management S...

CVE-2026-92085

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in TMT Machinery Indu

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

Cloudron 9.1.7 and 9.2 contain a stored cross-site scripting (XSS) vulnerability in the Branding Footer feature. An authenticated administrator can store crafted HTML containing...

CVE-2026-79363

Cloudron 9.1.7 and 9.2 contain a stored cross-site scripting (XSS) vulnerability in the Branding Footer feature. An auth

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Designthemes Whistle - Sports Club whistle-sports-club allows Reflected XSS...

CVE-2026-94061

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Designthemes Whist

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bracketweb Voldor voldor allows Reflected XSS.This issue affects Voldor: fr...

CVE-2026-94060

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bracketweb Voldor

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bracketweb Ogency ogency allows Reflected XSS.This issue affects Ogency: fr...

CVE-2026-94059

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bracketweb Ogency

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bracketweb Treck treck allows Reflected XSS.This issue affects Treck: from ...

CVE-2026-94058

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bracketweb Treck t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFunnels Team WPFunnels wpfunnels allows Stored XSS.This issue affects WPF...

CVE-2026-62029

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFunnels Team WPF

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Delight Star Inc. WP Associate Post R2 wp-associate-post-r2 allows Reflecte...

CVE-2026-105870

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Delight Star Inc.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Datasolution AcyMailing SMTP Newsletter acymailing allows Reflected XSS.Thi...

CVE-2026-105318

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Datasolution AcyMa

历史摘要 · 未重新核验 · NVD