#cwe-79

共收录 5328 条相关情报。

← 返回所有主题
漏洞预警2026-10-29 发布HIGH

Unauthenticated Cross Site Scripting (XSS) in GlobalPayments WooCommerce <= 1.23.3 versions.

CVE-2026-118085

Unauthenticated Cross Site Scripting (XSS) in GlobalPayments WooCommerce <= 1.23.3 versions.

来源摘录 · NVD

漏洞预警2026-10-29 发布MEDIUM

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in POSIMYTH Innovations The Plus Addons for Elementor Page Builder Lite the-pl...

CVE-2026-116848

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in POSIMYTH Innovatio

来源摘录 · NVD

漏洞预警2026-10-29 发布HIGH

Unauthenticated Cross Site Scripting (XSS) in Chained Quiz <= 1.4.1 versions.

CVE-2026-108494

Unauthenticated Cross Site Scripting (XSS) in Chained Quiz <= 1.4.1 versions.

来源摘录 · NVD

漏洞预警2026-10-29 发布MEDIUM

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP Gutenberg Blocks by Kadence Blocks kadence-blocks al...

CVE-2026-39742

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / Stell

来源摘录 · NVD

漏洞预警2026-10-29 发布MEDIUM

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetElements For Elementor jet-elements allows Stored XSS.This is...

CVE-2026-39737

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetElem

来源摘录 · NVD

漏洞预警2026-10-29 发布MEDIUM

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Flash & HTML5 Video html5-video-player allows Stored XSS.This issu...

CVE-2026-118097

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Flash & H

来源摘录 · NVD

漏洞预警2026-10-29 发布MEDIUM

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows DOM-Ba...

CVE-2026-118095

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Lingren Medi

来源摘录 · NVD

漏洞预警2026-10-29 发布MEDIUM

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weDevs Happy Addons for Elementor happy-elementor-addons allows Stored XSS....

CVE-2026-116850

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weDevs Happy Addon

来源摘录 · NVD

漏洞预警2026-10-29 发布MEDIUM

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins StreamCast streamcast allows Stored XSS.This issue affects StreamC...

CVE-2026-116849

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins StreamCas

来源摘录 · NVD

漏洞预警2026-10-29 发布MEDIUM

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PublishPress PublishPress Authors publishpress-authors allows Stored XSS.Th...

CVE-2026-115610

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PublishPress Publi

来源摘录 · NVD

漏洞预警2026-10-29 发布MEDIUM

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Strong Testimonials strong-testimonials allows Stored XSS.This iss...

CVE-2026-114706

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Strong Te

来源摘录 · NVD

漏洞预警2026-10-29 发布MEDIUM

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force SureDash suredash allows Stored XSS.This issue affects Sur...

CVE-2026-110881

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force S

来源摘录 · NVD

漏洞预警2026-10-29 发布MEDIUM

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Codection Import and export users and customers import-users-from-csv-with-...

CVE-2026-54862

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Codection Import a

来源摘录 · NVD

漏洞预警2026-10-29 发布MEDIUM

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins PDF Poster pdf-poster allows Stored XSS.This issue affects PDF Pos...

CVE-2026-48195

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins PDF Poste

来源摘录 · NVD

漏洞预警2026-10-29 发布MEDIUM

Multiple Pages Generator by Themeisle before 4.2.5 contains a stored cross-site scripting vulnerability that allows Contributor-level users to inject script via the [mpg] and [m...

CVE-2026-119054

Multiple Pages Generator by Themeisle before 4.2.5 contains a stored cross-site scripting vulnerability that allows Cont

来源摘录 · NVD

漏洞预警2026-10-29 发布MEDIUM

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetSmartFilters jet-smart-filters allows Stored XSS.This issue a...

CVE-2026-116857

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetSmar

来源摘录 · NVD

漏洞预警2026-10-29 发布INFO

Reflected cross-site scripting in the agent query feature of BMC Helix Operations Management 25.4.00 allows authenticated attackers to execute script in another user's browser a...

CVE-2026-113697

Reflected cross-site scripting in the agent query feature of BMC Helix Operations Management 25.4.00 allows authenticate

来源摘录 · NVD

漏洞预警2026-10-29 发布INFO

Reflected cross-site scripting in the SmartIT inline-image attachment feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01 allows authenticated user...

CVE-2026-113695

Reflected cross-site scripting in the SmartIT inline-image attachment feature of BMC IT Service Management Suite version

来源摘录 · NVD

漏洞预警2026-10-29 发布INFO

Stored cross-site scripting in the SmartIT knowledge-article feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01 allows authenticated users to exec...

CVE-2026-113691

Stored cross-site scripting in the SmartIT knowledge-article feature of BMC IT Service Management Suite versions 25.3.01

来源摘录 · NVD

漏洞预警2026-10-29 发布MEDIUM

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mamunur Rashid The Post Grid the-post-grid allows Stored XSS.This issue aff...

CVE-2026-56056

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mamunur Rashid The

来源摘录 · NVD