#cwe-79

共收录 5426 条相关情报。

漏洞预警2026-09-11 发布INFO

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the user 'donationLink' profile field. User::setDonat...

CVE-2026-89253

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-11 发布INFO

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the YPTWallet plugin where user-supplied CryptoWallet valu...

CVE-2026-89249

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in t

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-11 发布INFO

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a reflected cross-site scripting vulnerability in plugin/Gallery/view/Category.php when SubCategorys...

CVE-2026-89244

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a reflected cross-site scripting vulnerabil

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-11 发布INFO

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in UserGroups::setGroup_name() that fails to sanitize gr...

CVE-2026-89243

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-11 发布INFO

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a reflected cross-site scripting vulnerability in confirmLivePassword.php that copies REQUEST_URI in...

CVE-2026-89241

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a reflected cross-site scripting vulnerabil

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-11 发布INFO

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a reflected cross-site scripting vulnerability in plugin/Live/confirmLivePassword.php. The script in...

CVE-2026-89240

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a reflected cross-site scripting vulnerabil

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-11 发布INFO

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a reflected cross-site scripting vulnerability in the showAlertMessage() function that inserts the r...

CVE-2026-89239

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a reflected cross-site scripting vulnerabil

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-11 发布INFO

The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘comment’ parameter in all versions up ...

CVE-2026-17037

The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Stored Cross-Site

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-11 发布INFO

The Media Library Assistant plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the bulk edit preset export/import mechanism in versions up to and including 3....

CVE-2026-6642

The Media Library Assistant plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the bulk edit preset e

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-11 发布INFO

The Media Library Assistant plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'mla_gallery' shortcode in versions up to and including 3.35. This is due t...

CVE-2026-6641

The Media Library Assistant plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'mla_gallery' shor

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-11 发布INFO

The Media Library Assistant plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'mla_link_attributes' parameter in all versions up to, and including, 3.35 ...

CVE-2026-6640

The Media Library Assistant plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'mla_link_attribut

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-11 发布INFO

The Featured Image with URL WordPress plugin before 1.0.6 does not sanitise and escape a stored image attribute value before outputting it, which could allow users with a role a...

CVE-2026-86780

The Featured Image with URL WordPress plugin before 1.0.6 does not sanitise and escape a stored image attribute value be

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-11 发布INFO

The AI Builder WordPress plugin before 2.7.8 does not sanitise custom JavaScript saved against a post before echoing it inside a script tag on the front end, allowing users wit...

CVE-2026-85678

The AI Builder WordPress plugin before 2.7.8 does not sanitise custom JavaScript saved against a post before echoing it

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-11 发布INFO

The Gutenverse News WordPress plugin before 3.3.3 does not restrict the extra HTML it adds to WordPress's allowed elements to the context it is meant for, applying the same rel...

CVE-2026-85677

The Gutenverse News WordPress plugin before 3.3.3 does not restrict the extra HTML it adds to WordPress's allowed eleme

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-11 发布INFO

The CoolClock WordPress plugin before 4.3.8 does not properly escape a skin setting before outputting it within an HTML attribute, allowing users with contributor-level access a...

CVE-2026-83546

The CoolClock WordPress plugin before 4.3.8 does not properly escape a skin setting before outputting it within an HTML

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-11 发布INFO

The CoolClock WordPress plugin before 4.3.8 does not properly escape a custom skin setting before outputting it inside an inline script, allowing users with contributor-level ac...

CVE-2026-83545

The CoolClock WordPress plugin before 4.3.8 does not properly escape a custom skin setting before outputting it inside a

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-11 发布INFO

The advanced-customized-prompts WordPress plugin through 1.0.1 does not perform any capability, ownership, or nonce check before saving popup configuration to a product, nor esc...

CVE-2026-14565

The advanced-customized-prompts WordPress plugin through 1.0.1 does not perform any capability, ownership, or nonce chec

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-11 发布INFO

The Translate WordPress with GTranslate WordPress plugin before 3.0.10 does not validate one of its settings before the bundled front-end scripts build markup from it, allowing ...

CVE-2025-15695

The Translate WordPress with GTranslate WordPress plugin before 3.0.10 does not validate one of its settings before the

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-11 发布INFO

The WP-Members Membership Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URL Query String in all versions up to, and including, 3.5.6 due to ins...

CVE-2026-84960

The WP-Members Membership Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URL Query Stri

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-11 发布INFO

The Simple Ajax Chat – Add a Fast, Secure Chat Box plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Chat Message in all versions up to, and including, <= 20...

CVE-2026-81825

The Simple Ajax Chat – Add a Fast, Secure Chat Box plugin for WordPress is vulnerable to Stored Cross-Site Scripting via

历史摘要 · 未重新核验 · NVD

#cve #cwe-79