目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

type:xss 标签下的 CVE 漏洞 52025

type:xss 类型相关 52025 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。

type:xss 标签指代跨站脚本攻击，这是一种将恶意脚本注入可信网页的漏洞。其重要性在于攻击者可窃取用户会话凭证、劫持会话或执行恶意操作，严重威胁数据隐私与系统完整性。典型场景包括在评论区、搜索框或用户输入字段中注入 JavaScript 代码，当其他用户浏览该页面时脚本自动执行，导致敏感信息泄露或页面内容被篡改，是 Web 应用中最常见且危害巨大的安全风险之一。

CVE ID 标题 CVSS 风险等级 Published
CVE-2026-95586 WordPress Ultimate Addons for CF7 3.5.50 XSS漏洞 — Ultimate Addons for Contact Form 7 CWE-79 6.5 Medium 2026-09-23
CVE-2026-95530 WordPress PixelYourSite插件11.4.1跨站脚本漏洞 — PixelYourSite – Your smart PIXEL (TAG) Manager CWE-79 6.5 Medium 2026-09-23
CVE-2026-95529 WordPress 表单插件 5.5.1.1 跨站脚本漏洞 — Calculated Fields Form CWE-79 7.1 High 2026-09-23
CVE-2026-95528 WordPress插件Web Vitals 1.0.31 跨站脚本漏洞 — Core Web Vitals & PageSpeed Booster CWE-79 7.1 High 2026-09-23
CVE-2026-95515 WordPress Ninja Forms 3.15.3 跨站脚本漏洞 — Ninja Forms CWE-79 7.1 High 2026-09-23
CVE-2026-94684 WordPress Ocean Extra插件2.6.1跨站脚本漏洞 — Ocean Extra CWE-79 6.5 Medium 2026-09-23
CVE-2026-94682 WordPress Podcast Importer SecondLine 1.5.6 跨站脚本漏洞 — Podcast Importer SecondLine CWE-79 6.5 Medium 2026-09-23
CVE-2026-94680 WordPress The Post Grid 7.9.5 XSS 漏洞 — The Post Grid CWE-79 6.5 Medium 2026-09-23
CVE-2026-94671 WordPress The Post Grid 7.9.5 跨站脚本漏洞 — The Post Grid CWE-79 6.5 Medium 2026-09-23
CVE-2026-94500 WordPress ElementsKit插件XSS漏洞 — ElementsKit Elementor addons Lite CWE-79 6.5 Medium 2026-09-23
CVE-2026-94461 WordPress Ditty 3.1.69 跨站脚本漏洞 — Ditty CWE-79 6.5 Medium 2026-09-23
CVE-2026-94391 WordPress Ultimate FAQ 2.4.14 跨站脚本漏洞 — Ultimate FAQ CWE-79 6.5 Medium 2026-09-23
CVE-2026-94179 WordPress Razorpay插件2.4.9跨站脚本漏洞 — Razorpay Payment Button CWE-79 7.1 High 2026-09-23
CVE-2026-94176 WordPress Mang Board 插件 2.4.1 跨站脚本漏洞 — Mang Board WP CWE-79 7.1 High 2026-09-23
CVE-2026-94168 WordPress Elementor插件4.11.105跨站脚本漏洞 — Premium Addons for Elementor CWE-79 6.5 Medium 2026-09-23
CVE-2026-94118 WordPress Premium Blocks插件XSS漏洞 — Premium Blocks – Gutenberg Blocks for WordPress CWE-79 6.5 Medium 2026-09-23
CVE-2026-93774 WordPress WP Photo Album Plus 插件跨站脚本漏洞 — WP Photo Album Plus CWE-79 7.1 High 2026-09-23
CVE-2026-93772 WordPress wpForo插件3.1.5跨站脚本漏洞 — wpForo Forum CWE-79 6.5 Medium 2026-09-23
CVE-2026-93622 WordPress WPS Limit Login 1.5.9.3 跨站脚本漏洞 — WPS Limit Login CWE-79 7.1 High 2026-09-23
CVE-2026-93618 WordPress JetTricks 2.0.1 XSS漏洞 — JetTricks CWE-79 6.5 Medium 2026-09-23
CVE-2026-93526 WordPress Event Tickets 5.29.4 跨站脚本漏洞 — Event Tickets CWE-79 7.1 High 2026-09-23
CVE-2026-92730 LimeSurvey 7.0.14 反射型XSS漏洞 — LimeSurvey CWE-79 7.4 High 2026-09-23
CVE-2026-91775 LimeSurvey 7.0.14 反射型XSS漏洞 — LimeSurvey CWE-79 7.4 High 2026-09-23
CVE-2026-93769 HumHub 1.18.5 存储型XSS致管理员接管漏洞 — Humhub CWE-79 7.2 High 2026-09-23
CVE-2026-18872 IBM FTM 多项漏洞 — Financial Transaction Manager (FTM) for RedHat OpenShift CWE-79 9.3 Critical 2026-09-23
CVE-2026-59167 SunEditor 关键 XSS 漏洞 — suneditor CWE-79 10.0 Critical 2026-09-23
CVE-2026-5696 Microweber管理面板多漏洞 — Administration panel CWE-79 5.9 Medium 2026-09-23
CVE-2026-95627 Tauri框架v2 Dialog插件文件系统范围自动扩展漏洞 — tauri-plugin-dialog CWE-732 7.7 High 2026-09-23
CVE-2026-91928 Apache Sling XSS：消毒器绕过等漏洞 — Apache Sling XSS CWE-79 - - 2026-09-23
CVE-2026-91852 Apache Sling XSSImpl 跨站脚本漏洞 — Apache Sling XSS CWE-79 - - 2026-09-23

type:xss 是常见的弱点类别，本平台收录该类弱点关联的 52025 条 CVE 漏洞。