#cwe-79

共收录 5376 条相关情报。

← 返回所有主题
漏洞预警2026-09-23 发布INFO

Reflected Cross-Site Scripting (XSS) in Microweber. The vulnerability lies in the ‘group’ parameter of the ‘/admin/settings’ endpoint in the administration panel. A successful e...

CVE-2026-5696

Reflected Cross-Site Scripting (XSS) in Microweber. The vulnerability lies in the ‘group’ parameter of the ‘/admin/setti

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

Tauri's Content Security Policy hardening, which injects a random nonce to restrict script execution, provides zero protection when an application includes data: or blob: in its...

CVE-2026-95626

Tauri's Content Security Policy hardening, which injects a random nonce to restrict script execution, provides zero prot

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache Sling XSS. This issue affects Apache Sling XSS: before 2.4.12. ...

CVE-2026-91999

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache Sling XSS.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache Sling XSS. This issue affects Apache Sling XSS: before 2.4.12. ...

CVE-2026-91928

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache Sling XSS.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache Sling XSS. This issue affects Apache Sling XSS: before 2.4.12. ...

CVE-2026-91852

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache Sling XSS.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability when using the XSSAPI.getValidHref() in Apache Sling XSS version 2...

CVE-2026-73192

An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability when usin

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Google Maps block's 'customStyle' attribute in all versions up to, and in...

CVE-2026-5924

The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Google Maps bloc

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

The Subscribe Forms WordPress plugin before 1.6.3 does not sanitise and escape one of its form settings before outputting it in a page, allowing authenticated users with the Au...

CVE-2026-91073

The Subscribe Forms WordPress plugin before 1.6.3 does not sanitise and escape one of its form settings before outputti

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

The JSM Show Post Metadata WordPress plugin before 4.9.1 does not properly escape a post meta key before outputting it into an inline event-handler attribute in an admin-facing ...

CVE-2026-88997

The JSM Show Post Metadata WordPress plugin before 4.9.1 does not properly escape a post meta key before outputting it i

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

The HappyAddons for Elementor WordPress plugin before 3.50.0 does not escape an icon value on one of its button widgets before outputting it inside an HTML attribute, allowing ...

CVE-2026-85006

The HappyAddons for Elementor WordPress plugin before 3.50.0 does not escape an icon value on one of its button widgets

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

The Real3D Flipbook WordPress plugin before 5.4 does not sanitize or escape several flipbook editor fields before rendering them back in the admin editor, allowing users with t...

CVE-2025-15696

The Real3D Flipbook WordPress plugin before 5.4 does not sanitize or escape several flipbook editor fields before rende

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

A vulnerability has been found in onSite internet GmbH Auktion NG Auktionssoftware up to 20260722. This affects an unknown part of the file /forgotpasswd.html of the component P...

CVE-2026-96258

A vulnerability has been found in onSite internet GmbH Auktion NG Auktionssoftware up to 20260722. This affects an unkno

历史摘要 · 未重新核验 · NVD

安全公告2026-09-23 发布INFO

A vulnerability was found in SourceCodester Smart Attendance System with QR Code Scanner 1.0....

CVE-2026-95957

A vulnerability was found in SourceCodester Smart Attendance System with QR Code Scanner 1.0. This issue affects the fun

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-23 发布INFO

A vulnerability was found in SourceCodester Smart Attendance System with QR Code Scanner 1.0. This issue affects the function prepend of the file student_signup.php of the compo...

CVE-2026-95957

A vulnerability was found in SourceCodester Smart Attendance System with QR Code Scanner 1.0. This issue affects the fun

历史摘要 · 未重新核验 · NVD

安全公告2026-09-23 发布INFO

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to...

CVE-2026-18131

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execute arbitrary JavaScri

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-22 发布INFO

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execute arbitrary JavaScript in an authenticated user's browser due to improper neu...

CVE-2026-18131

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execute arbitrary JavaScri

历史摘要 · 未重新核验 · NVD

安全公告2026-09-22 发布INFO

ClipBucket v5 before 5.5.3-#182 contains a reflected cross-site scripting vulnerability in the...

CVE-2026-95812

ClipBucket v5 before 5.5.3-#182 contains a reflected cross-site scripting vulnerability in the sort_link() helper functi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-22 发布INFO

A stored cross-site scripting (XSS) vulnerability was identified in GitHub Enterprise Server that...

CVE-2026-77912

A stored cross-site scripting (XSS) vulnerability was identified in GitHub Enterprise Server that allowed an authenticat

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-22 发布INFO

Autonomy Logic OpenPLC 3 is susceptible to an improper neutralization of input during web page...

CVE-2026-88020

Autonomy Logic OpenPLC 3 is susceptible to an improper neutralization of input during web page generation vulnerability

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-22 发布INFO

ClipBucket v5 before 5.5.3-#182 contains a reflected cross-site scripting vulnerability in the sort_link() helper function that fails to sanitize cat, sort, and time query param...

CVE-2026-95812

ClipBucket v5 before 5.5.3-#182 contains a reflected cross-site scripting vulnerability in the sort_link() helper functi

历史摘要 · 未重新核验 · NVD