#cwe-79

共收录 5376 条相关情报。

漏洞预警2026-10-02 发布INFO

YesWiki before 4.6.7 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts via the field parameter of the mail handler....

CVE-2026-104465

YesWiki before 4.6.7 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to in

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-02 发布INFO

YesWiki before 4.6.7 contains a stored cross-site scripting vulnerability in the Bazar FileField, which validates only the upload's file extension and never calls HtmlPurifierSe...

CVE-2026-104461

YesWiki before 4.6.7 contains a stored cross-site scripting vulnerability in the Bazar FileField, which validates only t

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-02 发布INFO

YesWiki before 4.6.7 contains a missing authorization flaw in the pointimage action (tools/attach/actions/pointimage.php), which saves content to an attacker-chosen page with wr...

CVE-2026-104450

YesWiki before 4.6.7 contains a missing authorization flaw in the pointimage action (tools/attach/actions/pointimage.php

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-02 发布INFO

Ghost from 2.5.0 before 6.64.0 contains a stored cross-site scripting vulnerability that allows attackers to inject untrusted scripts into post content via oEmbed photo response...

CVE-2026-104414

Ghost from 2.5.0 before 6.64.0 contains a stored cross-site scripting vulnerability that allows attackers to inject untr

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-02 发布INFO

Ghost from 5.94.0 before 6.64.0 contains a stored cross-site scripting vulnerability that allows staff users, including Contributors, to host arbitrary HTML by abusing bookmark ...

CVE-2026-104413

Ghost from 5.94.0 before 6.64.0 contains a stored cross-site scripting vulnerability that allows staff users, including

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-02 发布INFO

Ghost from 6.22.1 before 6.64.0 contains a stored cross-site scripting vulnerability that allows staff users to host scripts by uploading files served with extension-derived con...

CVE-2026-104411

Ghost from 6.22.1 before 6.64.0 contains a stored cross-site scripting vulnerability that allows staff users to host scr

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

安全公告2026-10-02 发布INFO

YesWiki before 4.5.3 Multiple Reflected XSS via BazaR and listpages

CVE-2026-104473

YesWiki before 4.5.3 contains multiple reflected cross-site scripting vulnerabilities that allow remote attackers to inj

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-79

安全公告2026-10-02 发布INFO

YesWiki before 4.6.7 SSRF and XSS via Bazar valeur Action

CVE-2026-104470

YesWiki before 4.6.7 contains a server-side request forgery vulnerability in the Bazar valeur action that allows page ed

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-79

安全公告2026-10-02 发布INFO

YesWiki before 4.6.7 Stored XSS via Wakka Markdown Image src Attribute

CVE-2026-104466

YesWiki before 4.6.7 contains a stored cross-site scripting vulnerability in formatters/wakka.php that allows users who

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-79

安全公告2026-10-02 发布INFO

YesWiki before 4.6.7 Reflected XSS via field Parameter in mail Handler

CVE-2026-104465

YesWiki before 4.6.7 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to in

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-79

安全公告2026-10-02 发布INFO

YesWiki before 4.6.7 Stored XSS via Unsanitized SVG Upload in Bazar FileField

CVE-2026-104461

YesWiki before 4.6.7 contains a stored cross-site scripting vulnerability in the Bazar FileField, which validates only t

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-79

安全公告2026-10-02 发布INFO

YesWiki before 4.6.7 ACL Bypass and Stored XSS via pointimage Action

CVE-2026-104450

YesWiki before 4.6.7 contains a missing authorization flaw in the pointimage action (tools/attach/actions/pointimage.php

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-79

安全公告2026-10-02 发布INFO

Ghost from 2.5.0 before 6.64.0 Stored XSS via oEmbed Photo Responses

CVE-2026-104414

Ghost from 2.5.0 before 6.64.0 contains a stored cross-site scripting vulnerability that allows attackers to inject untr

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-79

安全公告2026-10-02 发布INFO

Ghost 5.94.0 before 6.64.0 Stored XSS via Bookmark Card Images

CVE-2026-104413

Ghost from 5.94.0 before 6.64.0 contains a stored cross-site scripting vulnerability that allows staff users, including

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-79

安全公告2026-10-02 发布INFO

Ghost 6.22.1 before 6.64.0 Stored XSS via Local Storage File Uploads

CVE-2026-104411

Ghost from 6.22.1 before 6.64.0 contains a stored cross-site scripting vulnerability that allows staff users to host scr

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-79

漏洞预警2026-10-02 发布INFO

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary cod...

CVE-2026-59668

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-02 发布INFO

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary cod...

CVE-2026-59667

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-02 发布INFO

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary cod...

CVE-2026-59666

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-02 发布INFO

The WP Statistics – Simple, privacy-friendly Google Analytics alternative plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via REQUEST_URI Query-Parameter Ke...

CVE-2026-97652

The WP Statistics – Simple, privacy-friendly Google Analytics alternative plugin for WordPress is vulnerable to Reflecte

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-02 发布INFO

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary cod...

CVE-2026-95662

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow

历史摘要 · 未重新核验 · NVD

#cve #cwe-79