#cwe-79

共收录 5345 条相关情报。

漏洞预警2026-10-05 发布INFO

DigitalCanion has discovered a stored Cross-Site Scripting (XSS) vulnerability that allows an authenticated malicious user to inject persistent JavaScript or HTML content into t...

CVE-2026-104807

DigitalCanion has discovered a stored Cross-Site Scripting (XSS) vulnerability that allows an authenticated malicious us

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-05 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sonaar MP3 Audio Player for Music, Radio & Podcast by Sonaar mp3-music-play...

CVE-2026-104673

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sonaar MP3 Audio P

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-05 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Image Photo Gallery Final Tiles Grid final-tiles-grid-gallery-lite...

CVE-2026-104409

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Image Pho

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-05 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP GiveWP give allows Stored XSS.This issue affects Giv...

CVE-2026-104404

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / Stell

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-05 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins B Blocks b-blocks allows Stored XSS.This issue affects B Blocks: f...

CVE-2026-104400

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins B Blocks

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-05 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jeroen Peters Name Directory name-directory allows Stored XSS.This issue af...

CVE-2026-104396

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jeroen Peters Name

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-05 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LeapWorx Premium Addons for Elementor premium-addons-for-elementor allows S...

CVE-2026-103084

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LeapWorx Premium A

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-05 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force Presto Player presto-player allows Stored XSS.This issue a...

CVE-2026-102914

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force P

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-05 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force Starter Templates astra-sites allows Stored XSS.This issue...

CVE-2026-102393

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force S

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-05 发布INFO

A vulnerability was found in code-projects Human Resource Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /views/admin/liveEventHis...

CVE-2026-105188

A vulnerability was found in code-projects Human Resource Management System 1.0. Affected by this vulnerability is an un

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

安全公告2026-10-05 发布INFO

A flaw has been found in code-projects Human Resource Management 1.0. This affects an unknown...

CVE-2026-105173

A flaw has been found in code-projects Human Resource Management 1.0. This affects an unknown part of the file /humanres

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-79 #severity:low

漏洞预警2026-10-05 发布INFO

A flaw has been found in code-projects Human Resource Management 1.0. This affects an unknown part of the file /humanresourcemanagementsystem/src/store/EventStore.php of the com...

CVE-2026-105173

A flaw has been found in code-projects Human Resource Management 1.0. This affects an unknown part of the file /humanres

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

安全公告2026-10-05 发布INFO

Twine 2 desktop through 2.12.0 contains a cross-site scripting vulnerability in importStories()...

CVE-2026-105220

Twine 2 desktop through 2.12.0 contains a cross-site scripting vulnerability in importStories() that executes markup fro

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-79 #severity:high

漏洞预警2026-10-04 发布INFO

Twine 2 desktop through 2.12.0 contains a cross-site scripting vulnerability in importStories() that executes markup from imported story files in the editor window. Attackers ca...

CVE-2026-105220

Twine 2 desktop through 2.12.0 contains a cross-site scripting vulnerability in importStories() that executes markup fro

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

安全公告2026-10-04 发布INFO

Twine 2 Desktop through 2.12.0 Arbitrary Code Execution via Imported Story Files

CVE-2026-105220

Twine 2 desktop through 2.12.0 contains a cross-site scripting vulnerability in importStories() that executes markup fro

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-79

安全公告2026-10-04 发布INFO

WWBN AVideo through 29.2.0 contains a stored cross-site scripting vulnerability that allows users...

CVE-2026-105089

WWBN AVideo through 29.2.0 contains a stored cross-site scripting vulnerability that allows users with upload permission

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-79 #severity:critical

安全公告2026-10-04 发布INFO

YesWiki before 4.6.7 contains a cross-site scripting vulnerability in the Bazar valeur action...

CVE-2026-105224

YesWiki before 4.6.7 contains a cross-site scripting vulnerability in the Bazar valeur action that allows page editors t

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-79 #severity:medium

安全公告2026-10-04 发布INFO

WWBN AVideo 12.4 through 29.2.0 contains a stored cross-site scripting vulnerability that allows...

CVE-2026-105086

WWBN AVideo 12.4 through 29.2.0 contains a stored cross-site scripting vulnerability that allows authenticated uploaders

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-79 #severity:critical

漏洞预警2026-10-04 发布INFO

YesWiki before 4.6.7 contains a cross-site scripting vulnerability in the Bazar valeur action that allows page editors to inject script by rendering unescaped HTML fetched from ...

CVE-2026-105224

YesWiki before 4.6.7 contains a cross-site scripting vulnerability in the Bazar valeur action that allows page editors t

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-04 发布INFO

WWBN AVideo through 29.2.0 contains a stored cross-site scripting vulnerability that allows users with upload permission to inject script by setting a malicious video trailer1 U...

CVE-2026-105089

WWBN AVideo through 29.2.0 contains a stored cross-site scripting vulnerability that allows users with upload permission

历史摘要 · 未重新核验 · NVD

#cve #cwe-79