CWE-79 在Web页面生成时对输入的转义处理不恰当(跨站脚本) 类弱点 21547 条 CVE 漏洞汇总，含 AI 中文分析。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2025-3970 | JSite 代码注入漏洞 — JSite | 3.5 | Low | 2025-04-27 |
| CVE-2025-3965 | paicoding 代码注入漏洞 — paicoding | 3.5 | Low | 2025-04-27 |
| CVE-2024-52888 | Check Point Mobile Access 安全漏洞 — Check Point Mobile Access | 5.4 | Medium | 2025-04-27 |
| CVE-2024-52887 | Check Point Mobile Access 安全漏洞 — Check Point Mobile Access | 3.5 | Low | 2025-04-27 |
| CVE-2025-3962 | Books-Management-System 代码注入漏洞 — Books-Management-System | 3.5 | Low | 2025-04-27 |
| CVE-2025-3961 | Books-Management-System 代码注入漏洞 — Books-Management-System | 3.5 | Low | 2025-04-27 |
| CVE-2025-3958 | Books-Management-System 代码注入漏洞 — Books-Management-System | 3.5 | Low | 2025-04-27 |
| CVE-2025-46657 | Karaz Karazal 安全漏洞 — Karazal | 7.2 | High | 2025-04-27 |
| CVE-2025-46689 | Ververica Platform 安全漏洞 — Ververica Platform | 5.4 | Medium | 2025-04-27 |
| CVE-2025-1458 | WordPress plugin Element Pack Addons for Elementor 跨站脚本漏洞 — Element Pack – Widgets, Templates & Addons for Elementor | 6.4 | Medium | 2025-04-26 |
| CVE-2025-2069 | Lenovo Filez 跨站脚本漏洞 — Client | 5.0 | Medium | 2025-04-25 |
| CVE-2024-56156 | Halo 跨站脚本漏洞 — halo | 9.0 | - | 2025-04-25 |
| CVE-2025-3643 | Moodle 跨站脚本漏洞 | 5.4 | Medium | 2025-04-25 |
| CVE-2025-46618 | JetBrains TeamCity 跨站脚本漏洞 — TeamCity | 3.5 | Low | 2025-04-25 |
| CVE-2025-2986 | IBM Maximo Asset Management 跨站脚本漏洞 — Maximo Asset Management | 5.5 | Medium | 2025-04-25 |
| CVE-2025-3870 | WordPress plugin 1 Decembrie 1918 跨站脚本漏洞 — 1 Decembrie 1918 | 6.1 | Medium | 2025-04-25 |
| CVE-2025-46482 | WordPress plugin WP Quiz 跨站脚本漏洞 — WP Quiz | 6.5 | Medium | 2025-04-25 |
| CVE-2025-3868 | WordPress plugin Custom Admin-Bar Favorites 跨站脚本漏洞 — Custom Admin-Bar Favorites | 6.1 | Medium | 2025-04-25 |
| CVE-2025-3867 | WordPress plugin Ajax Comment Form CST 跨站脚本漏洞 — Ajax Comment Form CST | 6.1 | Medium | 2025-04-25 |
| CVE-2025-3866 | WordPress plugin Add Google +1 跨站脚本漏洞 — Add Google +1 (Plus one) social share Button | 6.1 | Medium | 2025-04-25 |
| CVE-2025-2580 | WordPress plugin Contact Form by Bit Form 跨站脚本漏洞 — Bit Form – Custom Contact Form, Multi Step, Conversational Form & Payment Form builder | 4.9 | Medium | 2025-04-25 |
| CVE-2025-3752 | WordPress plugin Able Player 跨站脚本漏洞 — Able Player, accessible HTML5 media player | 6.4 | Medium | 2025-04-25 |
| CVE-2025-46595 | Backdrop CMS 跨站脚本漏洞 — Flag | 6.4 | Medium | 2025-04-25 |
| CVE-2025-46545 | Sherpa Orchestrator 跨站脚本漏洞 — Orchestrator | 4.4 | Medium | 2025-04-25 |
| CVE-2025-1294 | WordPress plugin eForm 跨站脚本漏洞 — eForm - WordPress Form Builder | 7.2 | High | 2025-04-24 |
| CVE-2025-3749 | WordPress plugin Breeze Display 跨站脚本漏洞 — Breeze Display | 6.4 | Medium | 2025-04-24 |
| CVE-2025-43861 | ManageWiki 跨站脚本漏洞 — ManageWiki | 4.4 | Medium | 2025-04-24 |
| CVE-2022-44759 | 编号已被CVE保留 — HCL Leap | 4.6 | Medium | 2025-04-24 |
| CVE-2023-37534 | HCL Leap 安全漏洞 — HCL Leap | 7.1 | High | 2025-04-24 |
| CVE-2024-30113 | HCL Leap 安全漏洞 — HCL Leap | 6.3 | Medium | 2025-04-24 |
CWE-79（在Web页面生成时对输入的转义处理不恰当(跨站脚本)） 是常见的弱点类别，本平台收录该类弱点关联的 21547 条 CVE 漏洞。