CVE-2026-9390

The XML::Sig library for Perl (versions before 0.71 ) is vulnerable to XPath injection during ID lookup. The verify() and _get_signed_xml() functions in lib/XML/Sig.pm construct XPath expressions by concatenating the SignedInfo/Reference/@URI value from a document without proper escaping or valid...

CVE-2025-60503

A cross-site scripting XSS vulnerability exists in the administrative interface of ultimatefosters UltimatePOS 4.8 where input submitted in the purchase functionality is reflected without proper escaping in the admin log panel page in the 'reference No.' field. This flaw allows an authenticated...

Jenkins Active Choices 跨站脚本漏洞

Jenkins Active Choices is a Jenkins open source application plugin . Used in parameterized freestyle Jenkins jobs to create scripted , dynamic and interactive job parameters. A cross-site script execution vulnerability exists in Jenkins Active Choices Plugin 2.5.2 and earlier versions. The...