CVE-2026-5513

CVE-2026-5513 — Bookly ≤ 27.2 存储型XSS（通过Cookie） 概述 字段| 值 ---|--- CVE ID| CVE-2026-5513 漏洞类型| 存储型跨站脚本（XSS） 插件| Bookly — 在线日程安排与预约预订系统 受影响版本| ≤ 27.2 修复版本| 27.3+ CVSS 3.1| 7.2（高危） — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N CWE| CWE-79 是否需要认证| 无 前提条件| 记住个人Cookie信息 必须 启用 （默认禁用） 描述 WordPress 的 Bookl...

CVE-2021-29624

fastify-csrf is an open-source plugin helps developers protect their Fastify server against CSRF attacks. Versions of fastify-csrf prior to 3.1.0 have a "double submit" mechanism using cookies with an application deployed across multiple subdomains, e.g. "heroku"-style platform as a service...

From django SECRET_KEY to code execution-vulnerability warning-the black bar safety net

A recent review of the code found in some products in the logon of JS code in the leaked SECRETKEY,the value as the password to encrypt the salt, thus exposing the encryption salt is not good., more important is the django security caused great threat. 0x01 SECRETKEY role SECTETKEY in djanog used...