9 matches found
EUVD-2026-16299
A cross-site scripting XSS vulnerability in the wffcolspref.css.aspx endpoint of staffwiki v7.0.1.19219 allows attackers to execute arbitrary Javascript in the context of the user's browser via a crafted HTTP request...
CVE-2026-29969
A cross-site scripting XSS vulnerability in the wffcolspref.css.aspx endpoint of staffwiki v7.0.1.19219 allows attackers to execute arbitrary Javascript in the context of the user's browser via a crafted HTTP request...
CVE-2026-29969
A cross-site scripting XSS vulnerability in the wffcolspref.css.aspx endpoint of staffwiki v7.0.1.19219 allows attackers to execute arbitrary Javascript in the context of the user's browser via a crafted HTTP request...
CVE-2026-29969
A cross-site scripting XSS vulnerability in the wffcolspref.css.aspx endpoint of staffwiki v7.0.1.19219 allows attackers to execute arbitrary Javascript in the context of the user's browser via a crafted HTTP request...
WorkflowFirst StaffWiki 安全漏洞
WorkflowFirst StaffWiki is an internal knowledge management and collaboration platform provided by the US company WorkflowFirst. Version 7.0.1.19219 of StaffWiki has a security vulnerability. This vulnerability stems from a cross-site scripting vulnerability present in the wff colspref.css.aspx...
CVE-2026-29969
The WorkflowFirst StaffWiki internal knowledge management platform, specifically version 7.0.1.19219 , is vulnerable to a cross-site scripting (XSS) flaw. The root cause is the improper neutralization of input during web page generation within the wff_cols_pref.css.aspx endpoint. This allows an a...
CVE-2026-29969
A cross-site scripting XSS vulnerability in the wffcolspref.css.aspx endpoint of staffwiki v7.0.1.19219 allows attackers to execute arbitrary Javascript in the context of the user's browser via a crafted HTTP request...
PT-2026-28392
Name of the Vulnerable Software and Affected Versions staffwiki version 7.0.1.19219 Description A cross-site scripting XSS issue exists in staffwiki. This allows attackers to execute arbitrary Javascript in the context of a user's browser through a crafted HTTP request. The vulnerable API endpoin...
CVE-2026-29969: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in the wffcolspref.css.aspx endpoint of staffwiki v7.0.1.19219 allows attackers to execute arbitrary Javascript in the context of the user's browser via a crafted HTTP request...