CWE-79 在Web页面生成时对输入的转义处理不恰当(跨站脚本) 类弱点 21530 条 CVE 漏洞汇总，含 AI 中文分析。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2025-62885 | WordPress plugin WP VR 安全漏洞 — WP VR | 6.5 | Medium | 2025-10-27 |
| CVE-2025-55757 | VirtueMart 安全漏洞 — Virtuemart component for Joomla | 6.1 | - | 2025-10-25 |
| CVE-2025-11897 | WordPress plugin The7 安全漏洞 — The7 — Website and eCommerce Builder for WordPress | 6.4 | Medium | 2025-10-25 |
| CVE-2025-11875 | WordPress plugin SpendeOnline.org 跨站脚本漏洞 — SpendeOnline.org | 6.4 | Medium | 2025-10-25 |
| CVE-2025-10580 | WordPress plugin Widget Options 安全漏洞 — Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets | 6.4 | Medium | 2025-10-25 |
| CVE-2025-12034 | WordPress plugin Fast Velocity Minify 安全漏洞 — Fast Velocity Minify | 4.4 | Medium | 2025-10-25 |
| CVE-2025-10737 | WordPress plugin Genesis Framework 跨站脚本漏洞 — Open Source Genesis Framework | 6.4 | Medium | 2025-10-25 |
| CVE-2025-8588 | WordPress plugin PublishPress Blocks 跨站脚本漏洞 — PublishPress Blocks – Block Controls, Block Visibility, Block Permissions | 6.4 | Medium | 2025-10-25 |
| CVE-2025-8413 | WordPress plugin Listeo 跨站脚本漏洞 — Listeo - Directory & Listings With Booking - WordPress Theme | 6.4 | Medium | 2025-10-25 |
| CVE-2025-8666 | WordPress plugin Testimonial Carousel For Elementor 安全漏洞 — Testimonial Carousel For Elementor | 6.4 | Medium | 2025-10-25 |
| CVE-2025-11238 | WordPress plugin Watu Quiz 跨站脚本漏洞 — Watu Quiz | 7.2 | High | 2025-10-25 |
| CVE-2025-62716 | Plane 输入验证错误漏洞 — plane | 8.1 | High | 2025-10-24 |
| CVE-2025-12017 | WordPress plugin VNPAY Payment gateway 跨站脚本漏洞 — VNPAY Payment gateway | 6.1 | Medium | 2025-10-24 |
| CVE-2025-12096 | WordPress plugin Simple Excel Pricelist for WooCommerce 跨站脚本漏洞 — Simple Excel Pricelist for WooCommerce | 6.4 | Medium | 2025-10-24 |
| CVE-2025-10701 | WordPress plugin Time Clock 跨站脚本漏洞 — Time Clock – A WordPress Employee & Volunteer Time Clock Plugin | 6.4 | Medium | 2025-10-24 |
| CVE-2025-12016 | WordPress plugin qnotsquiz 跨站脚本漏洞 — qnotsquiz | 4.4 | Medium | 2025-10-24 |
| CVE-2025-9158 | Request Tracker 安全漏洞 — Request Tracker | 5.4 | - | 2025-10-24 |
| CVE-2025-61931 | Pleasanter 跨站脚本漏洞 — Pleasanter | 5.4 | - | 2025-10-24 |
| CVE-2025-58070 | Pleasanter 跨站脚本漏洞 — Pleasanter | 5.4 | - | 2025-10-24 |
| CVE-2025-7730 | WordPress plugin Bold Page Builder 跨站脚本漏洞 — Bold Page Builder | 6.4 | Medium | 2025-10-23 |
| CVE-2025-62255 | Liferay Portal和Liferay DXP 跨站脚本漏洞 — Portal | 6.1AI | MediumAI | 2025-10-23 |
| CVE-2025-1679 | Moxa Ethernet switches 安全漏洞 — TN-4500A Series | 4.8AI | MediumAI | 2025-10-23 |
| CVE-2025-53701 | Vilar VS-IPC1002 跨站脚本漏洞 — VS-IPC1002 | 6.1AI | MediumAI | 2025-10-23 |
| CVE-2025-8427 | WordPress plugin Beaver Builder Plugin Starter Version 跨站脚本漏洞 — Beaver Builder Plugin (Starter Version) | 6.4 | Medium | 2025-10-23 |
| CVE-2025-40643 | Energy CRM 跨站脚本漏洞 — Energy CRM | 5.4AI | MediumAI | 2025-10-23 |
| CVE-2025-9981 | Open Solution QuickCMS 跨站脚本漏洞 — QuickCMS | 4.8AI | MediumAI | 2025-10-23 |
| CVE-2025-9980 | Open Solution QuickCMS 跨站脚本漏洞 — QuickCMS | 4.8AI | MediumAI | 2025-10-23 |
| CVE-2025-10914 | Proliz Student Affairs Information System 跨站脚本漏洞 — OBS (Student Affairs Information System) | 7.6 | High | 2025-10-23 |
| CVE-2025-10727 | ArkSigner AcBakImzala 跨站脚本漏洞 — AcBakImzala | 5.4 | Medium | 2025-10-23 |
| CVE-2025-54806 | Weseek Growi 跨站脚本漏洞 — GROWI | 6.1AI | MediumAI | 2025-10-23 |
CWE-79（在Web页面生成时对输入的转义处理不恰当(跨站脚本)） 是常见的弱点类别，本平台收录该类弱点关联的 21530 条 CVE 漏洞。