共收录 5376 条相关情报。
← 返回所有主题CVE-2026-85016
The Unlimited Elements for Elementor WordPress plugin before 2.0.21 does not escape an icon value before concatenating i
CVE-2026-84925
The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Reflected Cross-Site Script
CVE-2026-78471
The Autoptimize plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Author Name in all version
CVE-2026-13718
The Tabs Responsive WordPress plugin through 2.5 does not sanitize the content of WooCommerce product tabs before stori
CVE-2026-93367
The Visitors Traffic Real Time Statistics Pro plugin for WordPress is vulnerable to unauthenticated stored Cross-Site Sc
CVE-2026-71454
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in CWE-79 - Cross-sit
CVE-2026-71454
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in CWE-79 - Cross-sit
CVE-2026-71542
GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS. In versio
CVE-2026-70650
GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS. In versio
CVE-2026-54049
Sakai is a Collaboration and Learning Environment (CLE). From versions 23.0 to before 23.5, and versions 25.0 to before
CVE-2026-54049
Sakai is a Collaboration and Learning Environment (CLE). From versions 23.0 to before 23.5, and versions 25.0 to before
CVE-2026-55230
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to version
CVE-2026-55230
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to version
CVE-2026-101890
The Prime Mover plugin for WordPress before 2.2.1 contains a stored cross-site scripting vulnerability that allows attac
CVE-2026-102830
## Description A language pack ships a `Plural-Forms` header saying how the language counts, for example `nplurals=2; p
CVE-2026-102831
## Description JupyterLab 4.5.0 enabled copying and pasing cells through the system clipboard. The paste path parses cl
CVE-2026-97273
Unauthenticated Cross Site Scripting (XSS) in Premmerce Wishlist for WooCommerce <= 1.1.13 versions.
CVE-2026-97268
Unauthenticated Cross Site Scripting (XSS) in Premmerce Wishlist for WooCommerce <= 1.1.13 versions.
CVE-2026-97260
Unauthenticated Cross Site Scripting (XSS) in MaxGalleria <= 6.5.3 versions.
CVE-2026-56589
HCL BigFix Service Management is affected by a Stored Cross-Site Scripting (XSS) vulnerability, which could allow an att