#cwe-79

共收录 5345 条相关情报。

← 返回所有主题
漏洞预警2026-10-08 发布INFO

Jivejdon through 5.0 contains a reflected cross-site scripting vulnerability in application/message/postThread.jsp that allows attackers to inject script via the to and tag para...

CVE-2026-107797

Jivejdon through 5.0 contains a reflected cross-site scripting vulnerability in application/message/postThread.jsp that

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-08 发布INFO

Jivejdon from commit 5489372d through commit ee67a65e contains a reflected cross-site scripting vulnerability in application/query/taggedThreadList.jsp that allows unauthenticat...

CVE-2026-107796

Jivejdon from commit 5489372d through commit ee67a65e contains a reflected cross-site scripting vulnerability in applica

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-08 发布INFO

Satel Netco Design versions prior to v2.1.7 contains a stored cross site scripting vulnerability. An authenticated user with Network Operator privileges could store untrusted co...

CVE-2026-105269

Satel Netco Design versions prior to v2.1.7 contains a stored cross site scripting vulnerability. An authenticated user

历史摘要 · 未重新核验 · NVD

安全公告2026-10-08 发布INFO

Indico: Cross-Site-Scripting in minutes editor

CVE-2026-107397

### Impact There is a Cross-Site-Scripting vulnerability in the minute editor conflict UI tha's shown when concurrent ed

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-08 发布INFO

Jivejdon through 5.0 Stored XSS via Attachment Upload Content-Type

CVE-2026-107801

Jivejdon through 5.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to execute

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-08 发布INFO

Jivejdon through 5.0 Stored XSS via Private Short Messages

CVE-2026-107800

Jivejdon through 5.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-08 发布INFO

Jivejdon through 5.0 Stored XSS via messageListBody.jsp Forum Message Rendering

CVE-2026-107799

Jivejdon through 5.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-08 发布INFO

Jivejdon through commit ee67a65e Stored XSS via Markdown Links in TextStyle Rendering Filter

CVE-2026-107798

jivejdon from commit 595d8d22 through commit ee67a65e contains a stored cross-site scripting vulnerability in the defaul

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-08 发布INFO

Jivejdon through 5.0 Reflected XSS via postThread.jsp to and tag Parameters

CVE-2026-107797

Jivejdon through 5.0 contains a reflected cross-site scripting vulnerability in application/message/postThread.jsp that

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-08 发布INFO

Jivejdon through commit ee67a65e Reflected XSS via taggedThreadList.jsp tagID and count Parameters

CVE-2026-107796

Jivejdon from commit 5489372d through commit ee67a65e contains a reflected cross-site scripting vulnerability in applica

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-08 发布INFO

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 are vulnerable to cross-site scripting. This vulnerability allows an authenti...

CVE-2026-78407

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 are vulnerable to cr

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-08 发布INFO

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to cross-site scripting. This vulnerability allows an unauthent...

CVE-2026-17189

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to cro

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-08 发布INFO

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 local management interface in certain configurations is vulnerable to cross-s...

CVE-2026-11936

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 local management int

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-08 发布INFO

IBM Guardium Data Protection 12.2 IBM Security Guardium Data Protection is vulnerable to stored cross-site scripting (XSS) in the Quick Search results grid. An unauthenticated a...

CVE-2026-84244

IBM Guardium Data Protection 12.2 IBM Security Guardium Data Protection is vulnerable to stored cross-site scripting (XS

历史摘要 · 未重新核验 · NVD

安全公告2026-10-08 发布INFO

In Brocade ASCG before Brocade ASCG v3.0, several security-related HTTP Headers were missing in...

CVE-2023-5648

In Brocade ASCG before Brocade ASCG v3.0, several security-related HTTP Headers were missing in various Brocade ASCG URL

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-08 发布INFO

The Aurora Heatmap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url...

CVE-2026-94154

The Aurora Heatmap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in all vers

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-07 发布INFO

Ghost: Stored XSS via Embed Card Previews

CVE-2026-105643

### Impact Embed cards in the Ghost editor could be used to bypass the fix for GHSA-8vhf-xxpj-4qrg. Any staff user, inc

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-07 发布INFO

Ghost : Stored XSS via SVG Files in Content Imports

CVE-2026-105644

### Impact SVG images included in content imports were stored without sanitization. An attacker who convinced an Admini

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-07 发布INFO

Ghost: Stored XSS via SVG Uploads Bypassing Sanitization

CVE-2026-105649

### Impact SVG media thumbnails, and SVG images uploaded with a non-SVG file extension, were stored without sanitizatio

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-07 发布INFO

The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via registration metadata in all versions up to...

CVE-2026-102173

The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Stored Cross-Site

历史摘要 · 未重新核验 · NVD