CVE-2024-39031

CVE-2024-39031 : Silverpeas Core 在 Mes Agendas 中的存储型XSS漏洞 信息 描述： 在 Mes Agendas 中，用户可以创建新事件并将其添加到日历中。此外，用户可以邀请同一域中的其他人（包括管理员）参与这些事件。标准用户可以在创建事件时向“Titre”和“Description”字段注入XSS负载，然后将管理员或任何用户添加到该事件中。当被邀请的用户（受害者）查看自己的个人资料时，负载将在其浏览器中执行，即使他们并未点击该事件。 受影响版本： alert"XSS-Titre" 以及 alert"XSS-Description" 步骤 2...

CVE-2026-78742

Silverpeas Core =6.4.6 is vulnerable to Cross Site Scripting XSS via the Multimedia library application introduction...

CVE-2026-78738

Silverpeas Core 6.4.6 is vulnerable to Cross Site Scripting XSS via the Document management file upload feature...

CVE-2026-78741

Silverpeas Core =6.4.6 is vulnerable to Cross Site Scripting XSS in the wysiwyg-CKEditor image upload feature...

EUVD-2026-74260

Silverpeas Core =6.4.6 is vulnerable to Cross Site Scripting XSS in the wysiwyg-CKEditor image upload feature...

CVE-2026-78741

Silverpeas Core =6.4.6 is vulnerable to Cross Site Scripting XSS in the wysiwyg-CKEditor image upload feature...

CVE-2026-78738

Silverpeas Core 6.4.6 is vulnerable to Cross Site Scripting XSS via the Document management file upload feature...

EUVD-2026-74261

Silverpeas Core 6.4.6 is vulnerable to Cross Site Scripting XSS via the Document management file upload feature...

EUVD-2026-74259

Silverpeas Core =6.4.6 is vulnerable to Cross Site Scripting XSS via the Multimedia library application introduction...

CVE-2026-78742

Silverpeas Core versions up to and including 6.4.6 are vulnerable to Cross Site Scripting (XSS) via the Multimedia library application introduction field. The flaw allows an attacker to inject malicious scripts that execute in another user's browser, with changed scope and low impact on both conf...

CVE-2026-78741

Silverpeas Core versions up to 6.4.6 are affected by a Cross-Site Scripting (XSS) vulnerability in the wysiwyg-CKEditor image upload feature. The flaw allows an unauthenticated remote attacker, with user interaction, to inject malicious scripts via the image upload mechanism, resulting in a chang...

CVE-2026-78738

Silverpeas Core 6.4.6 is vulnerable to Cross-Site Scripting (XSS) via the Document management file upload feature . An attacker can craft a malicious document file that, when uploaded and processed by the application, injects script executed in the context of other users' browsers. The CVSS 3.1 b...

CVE-2026-78742

Silverpeas Core =6.4.6 is vulnerable to Cross Site Scripting XSS via the Multimedia library application introduction...

CVE-2026-30139

A reflected cross-site scripting XSS vulnerability in the AdvancedSearch functionality of Silverpeas Core before version 6.4.6 allows attackers to execute arbitrary JavaScript in the context of a user's browser via crafted input...

GHSA-VMJ7-7XMM-4349 Silverpeas Core has a reflected cross-site scripting vulnerability

A reflected cross-site scripting XSS vulnerability in the AdvancedSearch functionality of Silverpeas Core allows attackers to execute arbitrary JavaScript in the context of a user's browser via crafted input...

EUVD-2026-24960

A reflected cross-site scripting XSS vulnerability in the AdvancedSearch functionality of Silverpeas Core before version 6.4.6 allows attackers to execute arbitrary JavaScript in the context of a user's browser via crafted input...

Silverpeas Core has a reflected cross-site scripting vulnerability

A reflected cross-site scripting XSS vulnerability in the AdvancedSearch functionality of Silverpeas Core allows attackers to execute arbitrary JavaScript in the context of a user's browser via crafted input...

CVE-2026-30139

A reflected cross-site scripting XSS vulnerability in the AdvancedSearch functionality of Silverpeas Core before version 6.4.6 allows attackers to execute arbitrary JavaScript in the context of a user's browser via crafted input...

CVE-2026-30139

A reflected cross-site scripting XSS vulnerability in the AdvancedSearch functionality of Silverpeas Core before version 6.4.6 allows attackers to execute arbitrary JavaScript in the context of a user's browser via crafted input...

CVE-2026-30139

A reflected cross-site scripting XSS vulnerability in the AdvancedSearch functionality of Silverpeas Core before version 6.4.6 allows attackers to execute arbitrary JavaScript in the context of a user's browser via crafted input...