CWE-79 在Web页面生成时对输入的转义处理不恰当(跨站脚本) 类弱点 21535 条 CVE 漏洞汇总，含 AI 中文分析。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2025-7408 | SourceCodester Zoo Management System 代码注入漏洞 — Zoo Management System | 3.5 | Low | 2025-07-10 |
| CVE-2025-6948 | GitLab Community Edition和GitLab Enterprise Edition 跨站脚本漏洞 — GitLab | 8.7 | High | 2025-07-10 |
| CVE-2025-7387 | WordPress plugin Lana Downloads Manager 跨站脚本漏洞 — Lana Downloads Manager | 5.5 | Medium | 2025-07-10 |
| CVE-2025-5807 | WordPress plugin Gwolle Guestbook 跨站脚本漏洞 — Gwolle Guestbook | 6.1 | Medium | 2025-07-10 |
| CVE-2025-4406 | WordPress plugin wpForo Forum 跨站脚本漏洞 — wpForo Forum | 5.4 | Medium | 2025-07-10 |
| CVE-2025-6976 | WordPress plugin Events Manager 跨站脚本漏洞 — Events Manager – Calendar, Bookings, Tickets, and more! | 6.4 | Medium | 2025-07-09 |
| CVE-2025-6975 | WordPress plugin Events Manager 跨站脚本漏洞 — Events Manager – Calendar, Bookings, Tickets, and more! | 6.1 | Medium | 2025-07-09 |
| CVE-2025-7059 | WordPress plugin Simple Featured Image 跨站脚本漏洞 — Simple Featured Image | 6.4 | Medium | 2025-07-09 |
| CVE-2025-5678 | WordPress plugin Gutenberg Blocks with AI by Kadence WP 跨站脚本漏洞 — Kadence Blocks — Page Builder Toolkit for Gutenberg Editor | 6.4 | Medium | 2025-07-09 |
| CVE-2025-49534 | Adobe Experience Manager 跨站脚本漏洞 — Adobe Experience Manager | 5.4 | Medium | 2025-07-08 |
| CVE-2025-49547 | Adobe Experience Manager 跨站脚本漏洞 — Adobe Experience Manager | 5.4 | Medium | 2025-07-08 |
| CVE-2025-49542 | Adobe ColdFusion 跨站脚本漏洞 — ColdFusion | 5.2 | Medium | 2025-07-08 |
| CVE-2025-49541 | Adobe ColdFusion 跨站脚本漏洞 — ColdFusion | 4.3 | Medium | 2025-07-08 |
| CVE-2025-49543 | Adobe ColdFusion 跨站脚本漏洞 — ColdFusion | 4.3 | Medium | 2025-07-08 |
| CVE-2025-49540 | Adobe ColdFusion 跨站脚本漏洞 — ColdFusion | 4.3 | Medium | 2025-07-08 |
| CVE-2023-43039 | IBM OpenPages with Watson 跨站脚本漏洞 — OpenPages with Watson | 6.1 | Medium | 2025-07-08 |
| CVE-2025-7363 | Wikimedia Mediawiki - TitleIcon extension 安全漏洞 — Mediawiki - TitleIcon extension | 5.4AI | MediumAI | 2025-07-08 |
| CVE-2025-7362 | Wikimedia Mediawiki - MsUpload extension 安全漏洞 — Mediawiki - MsUpload extension | 5.4AI | MediumAI | 2025-07-08 |
| CVE-2025-53479 | Wikimedia Mediawiki - CheckUser Extension 安全漏洞 — Mediawiki - CheckUser extension | 6.1AI | MediumAI | 2025-07-08 |
| CVE-2025-2793 | IBM Sterling B2B Integrator和IBM Sterling File Gateway 跨站脚本漏洞 — Sterling B2B Integrator | 5.4 | Medium | 2025-07-08 |
| CVE-2025-53480 | Wikimedia Mediawiki - CheckUser Extension 安全漏洞 — Mediawiki - CheckUser extension | 6.1AI | MediumAI | 2025-07-08 |
| CVE-2025-3630 | IBM Sterling B2B Integrator和IBM Sterling File Gateway 跨站脚本漏洞 — Sterling B2B Integrator | 6.4 | Medium | 2025-07-08 |
| CVE-2025-7182 | itsourcecode Student Transcript Processing System 代码注入漏洞 — Student Transcript Processing System | 4.3 | Medium | 2025-07-08 |
| CVE-2025-40721 | Quiter Gateway 跨站脚本漏洞 — Quiter Gateway (Java WAR on Apache Tomcat) | 6.1AI | MediumAI | 2025-07-08 |
| CVE-2025-40720 | Quiter Gateway 跨站脚本漏洞 — Quiter Gateway (Java WAR on Apache Tomcat) | 6.1AI | MediumAI | 2025-07-08 |
| CVE-2025-40719 | Quiter Gateway 跨站脚本漏洞 — Quiter Gateway (Java WAR on Apache Tomcat) | 6.1AI | MediumAI | 2025-07-08 |
| CVE-2025-42956 | SAP NetWeaver Application Server ABAP and ABAP Platform 跨站脚本漏洞 — SAP NetWeaver Application Server ABAP | 6.1 | Medium | 2025-07-08 |
| CVE-2025-6743 | WordPress plugin Woodmart 跨站脚本漏洞 — Woodmart | 6.4 | Medium | 2025-07-08 |
| CVE-2025-5537 | WordPress plugin Lightbox & Modal Popup WordPress Plugin – FooBox 跨站脚本漏洞 — Lightbox & Modal Popup WordPress Plugin – FooBox | 6.4 | Medium | 2025-07-08 |
| CVE-2025-6244 | WordPress plugin Essential Addons for Elementor 跨站脚本漏洞 — Essential Addons for Elementor – Popular Elementor Templates & Widgets | 6.4 | Medium | 2025-07-08 |
CWE-79（在Web页面生成时对输入的转义处理不恰当(跨站脚本)） 是常见的弱点类别，本平台收录该类弱点关联的 21535 条 CVE 漏洞。