OpenAM before 16.1.3 contains a latent cross-site scripting defect that places the SAML message,...
CVE-2026-105116
OpenAM before 16.1.3 contains a latent cross-site scripting defect that places the SAML message, relay state and target
#cwe-79
共收录 5372 条相关情报。
← 返回所有主题OpenAM before 16.1.3 contains a reflected cross-site scripting vulnerability that allows...
CVE-2026-105114
OpenAM before 16.1.3 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to in
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, ...
CVE-2026-103342
WordPress 插件 Unlimited Elements For Elementor（Free Widgets, Addons, Templates）存在反射型跨站脚本（Reflected XSS）漏洞，编号 CVE-2026-103
OpenAM before 16.1.3 contains a latent cross-site scripting defect that places the SAML message, relay state and target URL unencoded into the load-balancer cookie bounce auto-s...
CVE-2026-105116
OpenAM before 16.1.3 contains a latent cross-site scripting defect that places the SAML message, relay state and target
OpenAM before 16.1.3 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying crafted parameters rendered unen...
CVE-2026-105114
OpenAM before 16.1.3 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to in
OpenAM before 16.1.3 Latent XSS in SAML Load-Balancer Cookie Bounce Page
CVE-2026-105116
OpenAM before 16.1.3 contains a latent cross-site scripting defect that places the SAML message, relay state and target
OpenAM before 16.1.3 Reflected XSS via OAuth2 Authorization Error Page
CVE-2026-105114
OpenAM before 16.1.3 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to in
The Twenty20 Image Before-After plugin for WordPress is vulnerable to Stored Cross-Site Scripting...
CVE-2026-92767
The Twenty20 Image Before-After plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'offset' Shortcode
The WPMobile.App – Android and iOS App Builder plugin for WordPress is vulnerable to Stored Cross...
CVE-2026-103421
The WPMobile.App – Android and iOS App Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the
The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to...
CVE-2026-92974
The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Sc
The WPFront Notification Bar plugin for WordPress is vulnerable to Reflected Cross-Site Scripting...
CVE-2026-93896
The WPFront Notification Bar plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and
The WPC Product Options for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site...
CVE-2026-97660
The WPC Product Options for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via wpcpo-* Ar
The WPC Estimated Delivery Date for WooCommerce plugin for WordPress is vulnerable to Reflected...
CVE-2026-104313
The WPC Estimated Delivery Date for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via
The Mail logging – WP Mail Catcher plugin for WordPress is vulnerable to Stored Cross-Site...
CVE-2026-93889
The Mail logging – WP Mail Catcher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via PHPMailer 'wp_m
The Responsive Plus – Elementor Templates & Starter Sites plugin for WordPress is vulnerable to...
CVE-2026-15795
The Responsive Plus – Elementor Templates & Starter Sites plugin for WordPress is vulnerable to Stored Cross-Site Script
The Twenty20 Image Before-After plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'offset' Shortcode Attribute in all versions up to, and including, 2.0.5 du...
CVE-2026-92767
The Twenty20 Image Before-After plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'offset' Shortcode
The WPC Product Options for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via wpcpo-* Array Key via Multipart Field Name in all versions up to, a...
CVE-2026-97660
The WPC Product Options for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via wpcpo-* Ar
The WPFront Notification Bar plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 3.5.1. This is due to the debug-log output pa...
CVE-2026-93896
The WPFront Notification Bar plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and
The Mail logging – WP Mail Catcher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via PHPMailer 'wp_mail_failed' Error Message in all versions up to, and incl...
CVE-2026-93889
The Mail logging – WP Mail Catcher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via PHPMailer 'wp_m
The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'thumb_url' parameter in all versions up ...
CVE-2026-92974
The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Sc