CWE-79 在Web页面生成时对输入的转义处理不恰当(跨站脚本) 类弱点 21535 条 CVE 漏洞汇总，含 AI 中文分析。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2025-43735 | Liferay Portal和Liferay DXP 跨站脚本漏洞 — Portal | 6.1AI | MediumAI | 2025-08-12 |
| CVE-2025-8874 | WordPress plugin Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations 跨站脚本漏洞 — Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits | 6.4 | Medium | 2025-08-12 |
| CVE-2025-8314 | WordPress plugin Software Issue Manager 跨站脚本漏洞 — Project Management, Bug and Issue Tracking Plugin – Software Issue Manager | 6.4 | Medium | 2025-08-12 |
| CVE-2025-8688 | WordPress plugin Inline Stock Quotes 跨站脚本漏洞 — Inline Stock Quotes | 6.4 | Medium | 2025-08-12 |
| CVE-2025-8568 | WordPress plugin GMap Generator 跨站脚本漏洞 — GMap Generator | 6.4 | Medium | 2025-08-12 |
| CVE-2025-8690 | WordPress plugin Simple Responsive Slider 跨站脚本漏洞 — Simple Responsive Slider | 6.4 | Medium | 2025-08-12 |
| CVE-2025-8685 | WordPress plugin Wp chart generator 跨站脚本漏洞 — Wp chart generator | 6.4 | Medium | 2025-08-12 |
| CVE-2025-8462 | WordPress plugin RT Easy Builder – Advanced addons for Elementor 跨站脚本漏洞 — RT Easy Builder – Advanced addons for Elementor | 6.4 | Medium | 2025-08-12 |
| CVE-2025-42975 | SAP NetWeaver Application Server ABAP 跨站脚本漏洞 — SAP NetWeaver Application Server ABAP (BIC Document) | 6.1 | Medium | 2025-08-12 |
| CVE-2025-42948 | SAP NetWeaver ABAP Platform 跨站脚本漏洞 — SAP NetWeaver ABAP Platform | 6.1 | Medium | 2025-08-12 |
| CVE-2025-42942 | SAP NetWeaver Application Server ABAP 跨站脚本漏洞 — SAP NetWeaver Application Server for ABAP | 6.1 | Medium | 2025-08-12 |
| CVE-2025-8847 | RuoYi 代码注入漏洞 — RuoYi | 3.5 | Low | 2025-08-11 |
| CVE-2025-8834 | JCG Link-net LW-N915R 代码注入漏洞 — Link-net LW-N915R | 2.4 | Low | 2025-08-11 |
| CVE-2025-8812 | pybbs 代码注入漏洞 — pybbs | 2.4 | Low | 2025-08-10 |
| CVE-2025-8788 | Portabilis i‑Diário 代码注入漏洞 — i-Diario | 3.5 | Low | 2025-08-10 |
| CVE-2025-8787 | Portabilis i‑Diário 代码注入漏洞 — i-Diario | 3.5 | Low | 2025-08-10 |
| CVE-2025-8786 | Portabilis i‑Diário 代码注入漏洞 — i-Diario | 3.5 | Low | 2025-08-10 |
| CVE-2025-8785 | i-Educar 代码注入漏洞 — i-Educar | 3.5 | Low | 2025-08-09 |
| CVE-2025-8784 | Portábilis i-Educar 代码注入漏洞 — i-Educar | 3.5 | Low | 2025-08-09 |
| CVE-2025-8765 | Datacom DM955 5GT 代码注入漏洞 — DM955 5GT 1200 | 3.5 | Low | 2025-08-09 |
| CVE-2025-7726 | WordPress plugin The7 跨站脚本漏洞 — The7 — Website and eCommerce Builder for WordPress | 6.4 | Medium | 2025-08-09 |
| CVE-2025-8751 | Total WebShield Extension 代码注入漏洞 — Total WebShield Extension | 3.1 | Low | 2025-08-09 |
| CVE-2025-8750 | mall 代码注入漏洞 — mall | 2.4 | Low | 2025-08-09 |
| CVE-2025-8743 | Scada-LTS 代码注入漏洞 — Scada-LTS | 3.5 | Low | 2025-08-08 |
| CVE-2025-8740 | My-Blog 代码注入漏洞 — My-Blog | 2.4 | Low | 2025-08-08 |
| CVE-2025-4576 | Liferay Portal和Liferay DXP 跨站脚本漏洞 — Portal | 6.1 | - | 2025-08-08 |
| CVE-2025-54784 | SuiteCRM 跨站脚本漏洞 — SuiteCRM | 8.8AI | HighAI | 2025-08-07 |
| CVE-2025-54783 | SuiteCRM 跨站脚本漏洞 — SuiteCRM | 6.1AI | MediumAI | 2025-08-07 |
| CVE-2025-55134 | agora 跨站脚本漏洞 — Agora | 6.4 | Medium | 2025-08-07 |
| CVE-2025-55133 | agora 跨站脚本漏洞 — Agora | 6.4 | Medium | 2025-08-07 |
CWE-79（在Web页面生成时对输入的转义处理不恰当(跨站脚本)） 是常见的弱点类别，本平台收录该类弱点关联的 21535 条 CVE 漏洞。