#cwe-79

共收录 5426 条相关情报。

← 返回所有主题
漏洞预警2026-09-18 发布INFO

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to emb...

CVE-2026-1029

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cro

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to emb...

CVE-2026-1025

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cro

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Versions starting in 3.1.0 and prior to 7.0.0 inse...

CVE-2025-61682

Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4.0 through 3.2.4.16 is vulnerable to cross-site scripting. This vulnerability allows an unauthentica...

CVE-2025-36147

IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4.0 through 3.2.4.16 is vulnerable to cross-

历史摘要 · 未重新核验 · NVD

安全公告2026-09-18 发布INFO

Semantic MediaWiki vulnerable to stored XSS through wikitext via improper use of non-reserved data attributes

CVE-2025-61682

Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-18 发布INFO

Concrete CMS Community Store before 2.7.8 renders customer-supplied order fields without HTML escaping in checkout and admin views. Unauthenticated attackers can store script pa...

CVE-2026-93659

Concrete CMS Community Store before 2.7.8 renders customer-supplied order fields without HTML escaping in checkout and a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

A vulnerability was found in SveltyCMS 0.0.6. This vulnerability affects unknown code of the file src/utils/media/media-service.server.ts of the component SVG Media Upload. Perf...

CVE-2026-93505

A vulnerability was found in SveltyCMS 0.0.6. This vulnerability affects unknown code of the file src/utils/media/media-

历史摘要 · 未重新核验 · NVD

安全公告2026-09-18 发布INFO

Concrete CMS Community Store before 2.7.8 Stored XSS

CVE-2026-93659

Concrete CMS Community Store before 2.7.8 renders customer-supplied order fields without HTML escaping in checkout and a

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-18 发布INFO

Cross Site Scripting vulnerability in Moonshot AI Kimi version as of 2026-07-18 allows a remote attacker to execute arbitrary code via the HTML artifact Preview rendering; publi...

CVE-2026-79294

Cross Site Scripting vulnerability in Moonshot AI Kimi version as of 2026-07-18 allows a remote attacker to execute arbi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

The WP Recipe Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'notes' parameter in all versions up to, and including, 10.8.1 due to insufficient ...

CVE-2026-90884

The WP Recipe Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'notes' parameter in all v

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

The Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via values[N...

CVE-2026-87915

The Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder plugin for WordPress

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

The Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Conten...

CVE-2026-18405

The Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress plugin for WordPress is vul

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

The Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via post_tit...

CVE-2026-15797

The Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder plugin for WordPress

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

The Complianz GDPR/CCPA Cookie Consent Banner plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Elementor Cookie Blocker Regex in all ver...

CVE-2026-83561

The Complianz GDPR/CCPA Cookie Consent Banner plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comm

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Video API in Synology DiskStation Manager (DSM) before 7.2.1-69057-10, 7...

CVE-2026-40534

An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Video API in Sy

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Theme API in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7...

CVE-2026-13623

An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Theme API in Sy

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

The CSS & JavaScript Toolbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 12.0.6 via the Assignment Engine fields. Thi...

CVE-2025-13533

The CSS & JavaScript Toolbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, an

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

The Strong Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'lightbox_class' Shortcode Attribute in all versions up to, and including, 3.3.8 du...

CVE-2026-92622

The Strong Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'lightbox_class' Shortcode

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

The ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via Query-String Parameter Name in...

CVE-2026-92554

The ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin plugin for WordPress is vulnerable to Reflecte

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

The Qi Addons For Elementor plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and including, 1.11 due to insuffic...

CVE-2026-92249

The Qi Addons For Elementor plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter i

历史摘要 · 未重新核验 · NVD