#cwe-79

共收录 5426 条相关情报。

漏洞预警2026-09-15 发布INFO

IBM Cloud Pak for Business Automation is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web...

CVE-2026-12750

IBM Cloud Pak for Business Automation is vulnerable to stored cross-site scripting. This vulnerability allows an authent

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-15 发布INFO

IBM Cloud Pak for Business Automation is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web...

CVE-2026-12749

IBM Cloud Pak for Business Automation is vulnerable to stored cross-site scripting. This vulnerability allows an authent

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-15 发布INFO

A vulnerability was identified in code-projects Record Management System 1.0. Affected is an unknown function of the file main/reg.php. Such manipulation of the argument desc le...

CVE-2026-91854

A vulnerability was identified in code-projects Record Management System 1.0. Affected is an unknown function of the fil

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-09-15 发布INFO

In Concrete CMS below CMS 9.5.3, the save_control action in the Express entities forms dashboard controller did not validate the anti-CSRF token. By causing an authenticated adm...

CVE-2026-81897

In Concrete CMS below CMS 9.5.3, the save_control action in the Express entities forms dashboard controller did not vali

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-352

漏洞预警2026-09-15 发布INFO

Concrete CMS before 9.5.3 does not apply HTML entity encoding to user-defined Form block question labels when rendering them as column headers in the Dashboard Form Submissions ...

CVE-2026-81896

Concrete CMS before 9.5.3 does not apply HTML entity encoding to user-defined Form block question labels when rendering

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-15 发布INFO

The EmbedVideo Extension is a MediaWiki extension which adds a parser function called #ev and various parser tags for embedding video clips from various video sharing services. ...

CVE-2026-55692

The EmbedVideo Extension is a MediaWiki extension which adds a parser function called #ev and various parser tags for em

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-15 发布INFO

The EmbedVideo Extension is a MediaWiki extension which adds a parser function called #ev and various parser tags for embedding video clips from various video sharing services. ...

CVE-2026-55691

The EmbedVideo Extension is a MediaWiki extension which adds a parser function called #ev and various parser tags for em

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-15 发布INFO

The EmbedVideo Extension is a MediaWiki extension which adds a parser function called #ev and various parser tags for embedding video clips from various video sharing services. ...

CVE-2026-55690

The EmbedVideo Extension is a MediaWiki extension which adds a parser function called #ev and various parser tags for em

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-15 发布INFO

crawl4ai versions before 0.9.3 contain a DOM-based cross-site scripting vulnerability in the Playground UI where the forceHighlightElement() function assigns textContent back to...

CVE-2026-91944

crawl4ai versions before 0.9.3 contain a DOM-based cross-site scripting vulnerability in the Playground UI where the for

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-15 发布INFO

crawl4ai before 0.9.3 contains a DOM-based cross-site scripting vulnerability in the Docker Playground UI that assigns untrusted crawl results to element.innerHTML. Attackers ca...

CVE-2026-91942

crawl4ai before 0.9.3 contains a DOM-based cross-site scripting vulnerability in the Docker Playground UI that assigns u

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-15 发布INFO

The "Design Scuole Italia" WordPress theme is affected by a Reflected XSS vulnerability in the filters-scheda-didattica.php file, allowing an unauthenticated attacker to execut...

CVE-2026-87793

The "Design Scuole Italia" WordPress theme is affected by a Reflected XSS vulnerability in the filters-scheda-didattica.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-15 发布INFO

Kiwi TCMS is an open source test management system. Prior to 16.1, TestCase.extra_link and TestPlan.extra_link accepted unsanitized user input and rendered stored values verbati...

CVE-2026-55630

Kiwi TCMS is an open source test management system. Prior to 16.1, TestCase.extra_link and TestPlan.extra_link accepted

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-15 发布INFO

Decidim is a participatory democracy framework. Prior to 0.32.0, a low-privilege process-scoped administrator or election editor with question-management rights can store HTML o...

CVE-2026-44282

Decidim is a participatory democracy framework. Prior to 0.32.0, a low-privilege process-scoped administrator or electio

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-15 发布INFO

The MotoPress Hotel Booking plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Stripe Webhook event object 'id' in all versions up to, and including, 6.2....

CVE-2026-90650

The MotoPress Hotel Booking plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Stripe Webhook eve

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-15 发布INFO

1024-lab SmartAdmin v3.30.0 contains a stored cross-site scripting vulnerability in its file upload functionality. This allows a remote attacker to execute arbitrary code.

CVE-2026-88618

1024-lab SmartAdmin v3.30.0 contains a stored cross-site scripting vulnerability in its file upload functionality. This

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-15 发布INFO

Outerbase Studio is a lightweight browser-based database GUI supporting PostgreSQL, MySQL, and SQLite. In version 0.10.2 and earlier, TextComponent in src/components/chart/index...

CVE-2026-55650

Outerbase Studio is a lightweight browser-based database GUI supporting PostgreSQL, MySQL, and SQLite. In version 0.10.2

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-15 发布INFO

The Bridge - Creative Multipurpose WordPress Theme theme for WordPress is vulnerable to Stored Cross-Site Scripting via 'circle_line' Shortcode Attribute in all versions up to, ...

CVE-2026-15609

The Bridge - Creative Multipurpose WordPress Theme theme for WordPress is vulnerable to Stored Cross-Site Scripting via

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-15 发布INFO

Steedos Platform through 3.0.15-beta.47 contains a reflected cross-site scripting vulnerability in the anonymous /api/page/render endpoint that fails to properly escape query pa...

CVE-2026-91922

Steedos Platform through 3.0.15-beta.47 contains a reflected cross-site scripting vulnerability in the anonymous /api/pa

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-15 发布INFO

Open Access Management (OpenAM) is an access management solution. From 13.0.0 until 16.1.2, the OAuth2 authorize endpoint's display=wap consent page reflects request-derived val...

CVE-2026-62280

Open Access Management (OpenAM) is an access management solution. From 13.0.0 until 16.1.2, the OAuth2 authorize endpoin

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-15 发布INFO

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, certain federation endpoints in a non-default clustered configuration inconsistently encode us...

CVE-2026-44793

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, certain federation endpoints in a non

历史摘要 · 未重新核验 · NVD

#cve #cwe-79