Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-79 (在Web页面生成时对输入的转义处理不恰当(跨站脚本)) — Vulnerability Class 21534

21534 vulnerabilities classified as CWE-79 (在Web页面生成时对输入的转义处理不恰当(跨站脚本)). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2025-47086 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) — Adobe Experience Manager 5.4 Medium2025-06-10
CVE-2025-46966 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) — Adobe Experience Manager 5.4 Medium2025-06-10
CVE-2025-47117 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) — Adobe Experience Manager 5.4 Medium2025-06-10
CVE-2025-46950 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) — Adobe Experience Manager 5.4 Medium2025-06-10
CVE-2025-47049 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) — Adobe Experience Manager 6.1 Medium2025-06-10
CVE-2025-46908 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) — Adobe Experience Manager 5.4 Medium2025-06-10
CVE-2025-46892 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) — Adobe Experience Manager 5.4 Medium2025-06-10
CVE-2025-46837 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) — Adobe Experience Manager 8.7 High2025-06-10
CVE-2025-46877 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) — Adobe Experience Manager 5.4 Medium2025-06-10
CVE-2025-47093 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) — Adobe Experience Manager 5.4 Medium2025-06-10
CVE-2025-46973 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) — Adobe Experience Manager 5.4 Medium2025-06-10
CVE-2025-47003 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) — Adobe Experience Manager 5.4 Medium2025-06-10
CVE-2025-46934 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) — Adobe Experience Manager 5.4 Medium2025-06-10
CVE-2025-46960 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) — Adobe Experience Manager 5.4 Medium2025-06-10
CVE-2025-46912 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) — Adobe Experience Manager 5.4 Medium2025-06-10
CVE-2025-47035 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) — Adobe Experience Manager 5.4 Medium2025-06-10
CVE-2025-46862 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) — Adobe Experience Manager 5.4 Medium2025-06-10
CVE-2025-5976 PHPGurukul Rail Pass Management System add-pass.php cross site scripting — Rail Pass Management System 3.5 Low2025-06-10
CVE-2025-5975 PHPGurukul Rail Pass Management System download-pass.php cross site scripting — Rail Pass Management System 4.3 Medium2025-06-10
CVE-2025-5974 PHPGurukul Restaurant Table Booking System check-status.php cross site scripting — Restaurant Table Booking System 3.5 Low2025-06-10
CVE-2025-5973 PHPGurukul Restaurant Table Booking System add-table.php cross site scripting — Restaurant Table Booking System 2.4 Low2025-06-10
CVE-2025-5972 PHPGurukul Restaurant Table Booking System manage-subadmins.php cross site scripting — Restaurant Table Booking System 2.4 Low2025-06-10
CVE-2025-36577 Dell Wyse Management Suite WMS 跨站脚本漏洞 — Wyse Management Suite 6.1 Medium2025-06-10
CVE-2025-36580 Dell Wyse Management Suite WMS 跨站脚本漏洞 — Wyse Management Suite 6.1 Medium2025-06-10
CVE-2025-47977 Nuance Digital Engagement Platform Spoofing Vulnerability — Nuance Digital Engagement Platform 8.2 High2025-06-10
CVE-2025-5970 PHPGurukul Restaurant Table Booking System add-subadmin.php cross site scripting — Restaurant Table Booking System 2.4 Low2025-06-10
CVE-2025-47110 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) — Adobe Commerce 8.4 High2025-06-10
CVE-2025-26395 SolarWinds SWOSH DOM-based reflective XSS Vulnerability — SolarWinds Observability Self-Hosted 7.1 High2025-06-10
CVE-2025-4577 Smash Balloon Custom Facebook Feed <= 4.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via `data-color` Attribute — Smash Balloon Social Post Feed – Simple Social Feeds for WordPress 6.4 Medium2025-06-10
CVE-2025-2918 Ultimate Blocks – WordPress Blocks Plugin <= 3.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets — Ultimate Blocks – 25+ Gutenberg Blocks for Block Editor 6.4 Medium2025-06-10

Vulnerabilities classified as CWE-79 (在Web页面生成时对输入的转义处理不恰当(跨站脚本)) represent 21534 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.