#cwe-79
共收录 5376 条相关情报。
← 返回所有主题 漏洞预警2026-09-23 发布INFO
CVE-2026-5696
Reflected Cross-Site Scripting (XSS) in Microweber. The vulnerability lies in the ‘group’ parameter of the ‘/admin/setti
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-23 发布INFO
CVE-2026-95626
Tauri's Content Security Policy hardening, which injects a random nonce to restrict script execution, provides zero prot
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-23 发布INFO
CVE-2026-91999
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache Sling XSS.
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-23 发布INFO
CVE-2026-91928
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache Sling XSS.
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-23 发布INFO
CVE-2026-91852
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache Sling XSS.
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-23 发布INFO
CVE-2026-73192
An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability when usin
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-23 发布INFO
CVE-2026-5924
The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Google Maps bloc
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-23 发布INFO
CVE-2026-91073
The Subscribe Forms WordPress plugin before 1.6.3 does not sanitise and escape one of its form settings before outputti
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-23 发布INFO
CVE-2026-88997
The JSM Show Post Metadata WordPress plugin before 4.9.1 does not properly escape a post meta key before outputting it i
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-23 发布INFO
CVE-2026-85006
The HappyAddons for Elementor WordPress plugin before 3.50.0 does not escape an icon value on one of its button widgets
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-23 发布INFO
CVE-2025-15696
The Real3D Flipbook WordPress plugin before 5.4 does not sanitize or escape several flipbook editor fields before rende
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-23 发布INFO
CVE-2026-96258
A vulnerability has been found in onSite internet GmbH Auktion NG Auktionssoftware up to 20260722. This affects an unkno
历史摘要 · 未重新核验 · NVD
安全公告2026-09-23 发布INFO
CVE-2026-95957
A vulnerability was found in SourceCodester Smart Attendance System with QR Code Scanner 1.0. This issue affects the fun
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-09-23 发布INFO
CVE-2026-95957
A vulnerability was found in SourceCodester Smart Attendance System with QR Code Scanner 1.0. This issue affects the fun
历史摘要 · 未重新核验 · NVD
安全公告2026-09-23 发布INFO
CVE-2026-18131
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execute arbitrary JavaScri
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-09-22 发布INFO
CVE-2026-18131
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execute arbitrary JavaScri
历史摘要 · 未重新核验 · NVD
安全公告2026-09-22 发布INFO
CVE-2026-95812
ClipBucket v5 before 5.5.3-#182 contains a reflected cross-site scripting vulnerability in the sort_link() helper functi
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-09-22 发布INFO
CVE-2026-77912
A stored cross-site scripting (XSS) vulnerability was identified in GitHub Enterprise Server that allowed an authenticat
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-09-22 发布INFO
CVE-2026-88020
Autonomy Logic OpenPLC 3 is susceptible to an improper neutralization of input during web page generation vulnerability
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-09-22 发布INFO
CVE-2026-95812
ClipBucket v5 before 5.5.3-#182 contains a reflected cross-site scripting vulnerability in the sort_link() helper functi
历史摘要 · 未重新核验 · NVD