共收录 104 条相关情报。
← 返回所有主题CVE-2026-7380
Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Armiya Information Techno
CVE-2025-36321
IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.2.2, 5.3.0 is vulnerable to HTML injection. A remote attacker could inject
CVE-2026-50229
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in the number guess example
CVE-2026-50229
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in the number guess example
CVE-2025-64637
Unauthenticated Content Injection in Auros Core <= 5.3.1 versions.
CVE-2026-57535
Content injected to PDF rendering contexts could, in many places, include HTML content including tags. If the src attr
CVE-2026-57534
Malicious HTML content could be injected into the content of a page in the pretix-pages plugin.
CVE-2026-57533
Malicious HTML content could be injected into the page pretix shows when redirection to an untrusted page occurs. Since
CVE-2026-57532
Malicious HTML content contained in the layout specification of a PDF ticket or badge layout was executed when the PDF
CVE-2026-13314
Malicious HTML content could be injected into the content rendered by the pretix-digital plugin.
CVE-2026-13225
Malicious HTML content could be injected into the email address of an order, which pretix showed without sanitization o
CVE-2026-52816
Gogs is an open source self-hosted Git service. Prior to 0.14.3, the Jupyter Notebook (ipynb) sanitizer endpoint at POST
CVE-2026-50146
Astro is a web framework. Prior to 6.3.3, when a component uses a client:* directive, Astro inserts named slot content i
CVE-2025-62198
An authenticated user can perform XSS. This issue affects Apache Atlas versions 2.4.0 and earlier. Users are recommend
CVE-2026-12812
A security vulnerability has been detected in Radware Cyber Controller up to 10.11.0. This affects an unknown part of th
CVE-2025-71331
Flowise before 3.0.8 contains a cross-site scripting (XSS) vulnerability caused by insufficient input filtering in chat
CVE-2025-71331
Flowise before 3.0.8 contains a cross-site scripting (XSS) vulnerability caused by insufficient input filtering in chat
### Summary Gogs renders Jupyter notebook files (`.ipynb`) using [jsvine/notebookjs](https://github.com/jsvine/notebook
CVE-2026-55692
### Summary With $wgEmbedVideoRequireConsent enabled (the default), the urls for videos are stored in a json-ified data
CVE-2026-55691
### Summary The user supplied class value is fed directly into the sprintf call that creates HTML. You can add a quote t