CWE-79 在Web页面生成时对输入的转义处理不恰当(跨站脚本) 类弱点 21532 条 CVE 漏洞汇总，含 AI 中文分析。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2025-27006 | WordPress plugin Authorsy 跨站脚本漏洞 — Authorsy | 6.5 | Medium | 2025-09-26 |
| CVE-2025-58917 | WordPress plugin Quantities and Units for WooCommerce 跨站脚本漏洞 — Quantities and Units for WooCommerce | 6.5 | Medium | 2025-09-26 |
| CVE-2025-59012 | WordPress plugin Traveler 跨站脚本漏洞 — Traveler | 7.1 | High | 2025-09-26 |
| CVE-2025-10490 | WordPress plugin Zephyr Project Manager 跨站脚本漏洞 — Zephyr Project Manager | 4.4 | Medium | 2025-09-26 |
| CVE-2025-10136 | WordPress plugin TweetThis Shortcode 跨站脚本漏洞 — TweetThis Shortcode | 6.4 | Medium | 2025-09-26 |
| CVE-2025-10180 | WordPress plugin Markdown Shortcode 跨站脚本漏洞 — Markdown Shortcode | 6.4 | Medium | 2025-09-26 |
| CVE-2025-9490 | WordPress plugin Popup Maker 跨站脚本漏洞 — Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder | 6.4 | Medium | 2025-09-26 |
| CVE-2025-9044 | WordPress plugin Mapster WP Maps 跨站脚本漏洞 — Mapster WP Maps | 6.4 | Medium | 2025-09-26 |
| CVE-2025-8200 | WordPress plugin Mega Elements – Addons for Elementor 跨站脚本漏洞 — Mega Elements – Addons for Elementor | 6.4 | Medium | 2025-09-26 |
| CVE-2025-10178 | WordPress plugin CM Business Directory 跨站脚本漏洞 — CM Business Directory – Optimise and showcase local business | 6.4 | Medium | 2025-09-26 |
| CVE-2025-8906 | WordPress plugin Widgets for Tiktok Feed 跨站脚本漏洞 — Widgets for Tiktok Feed | 6.4 | Medium | 2025-09-26 |
| CVE-2025-33116 | IBM Watson Studio 跨站脚本漏洞 — Watson Studio on Cloud Pak for Data | 4.4 | Medium | 2025-09-25 |
| CVE-2025-59838 | Monkeytype 安全漏洞 — monkeytype | 6.1AI | MediumAI | 2025-09-25 |
| CVE-2025-59832 | Horilla 安全漏洞 — horilla | 9.9 | Critical | 2025-09-25 |
| CVE-2025-10949 | iView Editor 代码注入漏洞 — iView Editor | 2.4 | Low | 2025-09-25 |
| CVE-2025-59839 | Extension Embed Video 安全漏洞 — mediawiki-extensions-EmbedVideo | 8.6 | High | 2025-09-25 |
| CVE-2025-10467 | PROLIZ Student Information System 跨站脚本漏洞 — OBS (Student Affairs Information System) | 8.9 | High | 2025-09-25 |
| CVE-2025-10946 | smsboom 代码注入漏洞 — smsboom | 3.5 | Low | 2025-09-25 |
| CVE-2025-10945 | smsboom 代码注入漏洞 — smsboom | 3.5 | Low | 2025-09-25 |
| CVE-2025-10944 | get-header-ip 代码注入漏洞 — get-header-ip | 3.5 | Low | 2025-09-25 |
| CVE-2025-10943 | WeChat-Face-Recognition 代码注入漏洞 — WeChat-Face-Recognition | 3.5 | Low | 2025-09-25 |
| CVE-2025-10940 | Total.js CMS 代码注入漏洞 — CMS | 2.4 | Low | 2025-09-25 |
| CVE-2025-60249 | Vulnerability-Lookup 跨站脚本漏洞 — vulnerability-lookup | 6.4 | Medium | 2025-09-25 |
| CVE-2025-59525 | Horilla 代码问题漏洞 — horilla | 5.4AI | MediumAI | 2025-09-24 |
| CVE-2025-59524 | Horilla 代码问题漏洞 — horilla | 8.8AI | HighAI | 2025-09-24 |
| CVE-2025-48867 | Horilla 跨站脚本漏洞 — horilla | 4.8 | Medium | 2025-09-24 |
| CVE-2025-10909 | Mangati NovoSGA 代码注入漏洞 — NovoSGA | 2.4 | Low | 2025-09-24 |
| CVE-2025-9353 | WordPress plugin Themify Builder 跨站脚本漏洞 — Themify Builder | 6.4 | Medium | 2025-09-24 |
| CVE-2025-43779 | Liferay Portal和Liferay DXP 跨站脚本漏洞 — Portal | 5.4AI | MediumAI | 2025-09-24 |
| CVE-2025-58674 | WordPress plugin Core 跨站脚本漏洞 — WordPress | 5.9 | Medium | 2025-09-23 |
CWE-79（在Web页面生成时对输入的转义处理不恰当(跨站脚本)） 是常见的弱点类别，本平台收录该类弱点关联的 21532 条 CVE 漏洞。