EUVD-2026-16299

A cross-site scripting XSS vulnerability in the wffcolspref.css.aspx endpoint of staffwiki v7.0.1.19219 allows attackers to execute arbitrary Javascript in the context of the user's browser via a crafted HTTP request...

CVE-2026-29969

A cross-site scripting XSS vulnerability in the wffcolspref.css.aspx endpoint of staffwiki v7.0.1.19219 allows attackers to execute arbitrary Javascript in the context of the user's browser via a crafted HTTP request...

CVE-2026-29969

A cross-site scripting XSS vulnerability in the wffcolspref.css.aspx endpoint of staffwiki v7.0.1.19219 allows attackers to execute arbitrary Javascript in the context of the user's browser via a crafted HTTP request...

CVE-2026-29969

A cross-site scripting XSS vulnerability in the wffcolspref.css.aspx endpoint of staffwiki v7.0.1.19219 allows attackers to execute arbitrary Javascript in the context of the user's browser via a crafted HTTP request...

CVE-2026-29969

The WorkflowFirst StaffWiki internal knowledge management platform, specifically version 7.0.1.19219 , is vulnerable to a cross-site scripting (XSS) flaw. The root cause is the improper neutralization of input during web page generation within the wff_cols_pref.css.aspx endpoint. This allows an a...

WorkflowFirst StaffWiki 安全漏洞

WorkflowFirst StaffWiki is an internal knowledge management and collaboration platform provided by the US company WorkflowFirst. Version 7.0.1.19219 of StaffWiki has a security vulnerability. This vulnerability stems from a cross-site scripting vulnerability present in the wff colspref.css.aspx...

CVE-2026-29969

A cross-site scripting XSS vulnerability in the wffcolspref.css.aspx endpoint of staffwiki v7.0.1.19219 allows attackers to execute arbitrary Javascript in the context of the user's browser via a crafted HTTP request...

CVE-2026-29969: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in the wffcolspref.css.aspx endpoint of staffwiki v7.0.1.19219 allows attackers to execute arbitrary Javascript in the context of the user's browser via a crafted HTTP request...

PT-2026-28392

Name of the Vulnerable Software and Affected Versions staffwiki version 7.0.1.19219 Description A cross-site scripting XSS issue exists in staffwiki. This allows attackers to execute arbitrary Javascript in the context of a user's browser through a crafted HTTP request. The vulnerable API endpoin...