#cwe-80

共收录 104 条相关情报。

安全公告2026-05-07 发布INFO

CVE-2026-44264

### Impact The Markdown renderer used in user comments and other user-provided content didn't properly sanitize some att

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-05 发布INFO

CVE-2026-43939

**Description:** Stored Cross-Site Scripting (XSS) occurs when user-supplied input is persisted by the application and l

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-05 发布INFO

CVE-2026-43938

**Description:** Stored (second-order) Cross-Site Scripting (XSS) occurs when attacker-controlled input is persisted thr

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

CVE-2026-35453

### Summary The HTML Writer in PhpSpreadsheet bypasses `htmlspecialchars()` output escaping when a cell uses a custom nu

历史摘要 · 未重新核验 · GitHub Advisory