#cwe-83

共收录 27 条相关情报。

← 返回所有主题
安全公告2026-06-16 发布INFO

OpenClaw before 2026.5.12 contains a cross-site scripting vulnerability in exported session HTML...

CVE-2026-53841

OpenClaw before 2026.5.12 contains a cross-site scripting vulnerability in exported session HTML that preserves unsafe j

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-16 发布INFO

OpenClaw before 2026.5.12 contains a cross-site scripting vulnerability in exported session HTML that preserves unsafe javascript: and data: links in generated content. Attacker...

CVE-2026-53841

OpenClaw before 2026.5.12 contains a cross-site scripting vulnerability in exported session HTML that preserves unsafe j

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-12 发布INFO

Nuxt is an open-source web development framework for Vue.js. Prior to versions 3.21.7 and 4.4.7, <NuxtLink> did not validate the URL scheme of values bound to its to or href pro...

CVE-2026-53722

Nuxt is an open-source web development framework for Vue.js. Prior to versions 3.21.7 and 4.4.7, did not validate the U

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-12 发布INFO

Nuxt is an open-source web development framework for Vue.js. From versions 3.4.3 to before 3.21.6 and 4.0.0-alpha.1 to before 4.4.6, navigateTo() with external: true generates a...

CVE-2026-45669

Nuxt is an open-source web development framework for Vue.js. From versions 3.4.3 to before 3.21.6 and 4.0.0-alpha.1 to b

历史摘要 · 未重新核验 · NVD

安全公告2026-05-22 发布INFO

Concrete CMS 9.5.0 and below is vulnerable to Reflected XSS in Legacy Pagination via HTML...

CVE-2026-8245

Concrete CMS 9.5.0 and below is vulnerable to Reflected XSS in Legacy Pagination via HTML attribute injection. Concrete\

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-21 发布INFO

Concrete CMS 9.5.0 and below is vulnerable to Reflected XSS in Legacy Pagination via HTML attribute injection. Concrete\Core\Legacy\Pagination builds pagination links by raw-int...

CVE-2026-8245

Concrete CMS 9.5.0 and below is vulnerable to Reflected XSS in Legacy Pagination via HTML attribute injection. Concrete\

历史摘要 · 未重新核验 · NVD

漏洞预警2023-05-10 发布MEDIUM

XWiki Platform is a generic wiki platform. Prior to version 14.6-rc-1, HTML rendering didn't check for dangerous attributes/attribute values. This allowed cross-site scripting (...

CVE-2023-32070

XWiki Platform is a generic wiki platform. Prior to version 14.6-rc-1, HTML rendering didn't check for dangerous attribu

来源摘录 · NVD