#cwe-79

共收录 5425 条相关情报。

← 返回所有主题
安全公告2026-09-20 发布INFO

A vulnerability was determined in code-projects Assessment Management 1.0. Affected by this...

CVE-2026-93977

A vulnerability was determined in code-projects Assessment Management 1.0. Affected by this vulnerability is an unknown

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-20 发布INFO

A vulnerability has been found in code-projects Assessment Management 1.0. This impacts an...

CVE-2026-93975

A vulnerability has been found in code-projects Assessment Management 1.0. This impacts an unknown function of the file

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-20 发布INFO

A vulnerability was found in code-projects Assessment Management 1.0. Affected is an unknown...

CVE-2026-93976

A vulnerability was found in code-projects Assessment Management 1.0. Affected is an unknown function of the file admin/

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-20 发布INFO

A vulnerability was determined in code-projects Assessment Management 1.0. Affected by this vulnerability is an unknown functionality of the file lecturer/add-single-mark.php. T...

CVE-2026-93977

A vulnerability was determined in code-projects Assessment Management 1.0. Affected by this vulnerability is an unknown

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

A vulnerability was found in code-projects Assessment Management 1.0. Affected is an unknown function of the file admin/add-user.php. The manipulation of the argument level resu...

CVE-2026-93976

A vulnerability was found in code-projects Assessment Management 1.0. Affected is an unknown function of the file admin/

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

A vulnerability has been found in code-projects Assessment Management 1.0. This impacts an unknown function of the file admin/edit-user.php of the component User Editing. The ma...

CVE-2026-93975

A vulnerability has been found in code-projects Assessment Management 1.0. This impacts an unknown function of the file

历史摘要 · 未重新核验 · NVD

安全公告2026-09-20 发布INFO

The Kirki WordPress plugin before 6.3.1 does not sanitize uploaded SVG files while making them...

CVE-2026-84223

The Kirki WordPress plugin before 6.3.1 does not sanitize uploaded SVG files while making them uploadable site-wide, al

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-20 发布INFO

The Master Slider WordPress plugin through 3.11.2 does not sanitise and escape some of its...

CVE-2026-14844

The Master Slider WordPress plugin through 3.11.2 does not sanitise and escape some of its shortcode attributes before

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-20 发布INFO

The Kirki WordPress plugin before 6.3.1 does not sanitize uploaded SVG files while making them uploadable site-wide, allowing users with author-level access and above to upload...

CVE-2026-84223

The Kirki WordPress plugin before 6.3.1 does not sanitize uploaded SVG files while making them uploadable site-wide, al

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

The Master Slider WordPress plugin through 3.11.2 does not sanitise and escape some of its shortcode attributes before outputting them in an inline script context, which could ...

CVE-2026-14844

The Master Slider WordPress plugin through 3.11.2 does not sanitise and escape some of its shortcode attributes before

历史摘要 · 未重新核验 · NVD

安全公告2026-09-20 发布INFO

A flaw has been found in olivier-ls PHP-FTS up to 1.1.2. Affected by this issue is the function...

CVE-2026-93956

A flaw has been found in olivier-ls PHP-FTS up to 1.1.2. Affected by this issue is the function SearchEngine::buildHighl

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-19 发布INFO

A flaw has been found in olivier-ls PHP-FTS up to 1.1.2. Affected by this issue is the function SearchEngine::buildHighlights of the file src/SearchEngine.php of the component S...

CVE-2026-93956

A flaw has been found in olivier-ls PHP-FTS up to 1.1.2. Affected by this issue is the function SearchEngine::buildHighl

历史摘要 · 未重新核验 · NVD

安全公告2026-09-19 发布INFO

hono before 4.13.7 fails to HTML-escape plain strings rendered by hono/jsx as a child or fallback...

CVE-2026-93981

hono before 4.13.7 fails to HTML-escape plain strings rendered by hono/jsx as a child or fallback of Suspense, as a stri

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-19 发布INFO

hono before 4.13.7 fails to HTML-escape plain strings rendered by hono/jsx as a child or fallback of Suspense, as a string child of ErrorBoundary alongside an asynchronous sibli...

CVE-2026-93981

hono before 4.13.7 fails to HTML-escape plain strings rendered by hono/jsx as a child or fallback of Suspense, as a stri

历史摘要 · 未重新核验 · NVD

安全公告2026-09-19 发布INFO

hono/jsx before 4.13.7 Cross-Site Scripting via Unescaped Strings

CVE-2026-93981

hono before 4.13.7 fails to HTML-escape plain strings rendered by hono/jsx as a child or fallback of Suspense, as a stri

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-19 发布INFO

The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the...

CVE-2026-5410

The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the spinner field in versions

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-19 发布INFO

The Gum Addon for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via...

CVE-2026-8354

The Gum Addon for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pop_tag' paramete

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-19 发布INFO

The LiteSpeed Cache plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ...

CVE-2026-76579

The LiteSpeed Cache plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'esi' parameter in all

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-19 发布INFO

The YS LeadGen plugin for WordPress is vulnerable to authorization bypass and Stored Cross-Site...

CVE-2026-1256

The YS LeadGen plugin for WordPress is vulnerable to authorization bypass and Stored Cross-Site Scripting via multiple A

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-19 发布INFO

The MC4WP: Mailchimp for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site...

CVE-2026-87917

The MC4WP: Mailchimp for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'data' Dynam

历史摘要 · 未重新核验 · GitHub Advisory