8 matches found
EUVD-2026-16299
A cross-site scripting XSS vulnerability in the wffcolspref.css.aspx endpoint of staffwiki v7.0.1.19219 allows attackers to execute arbitrary Javascript in the context of the user's browser via a crafted HTTP request...
CVE-2026-29969
A cross-site scripting XSS vulnerability in the wffcolspref.css.aspx endpoint of staffwiki v7.0.1.19219 allows attackers to execute arbitrary Javascript in the context of the user's browser via a crafted HTTP request...
CVE-2026-29969
A cross-site scripting XSS vulnerability in the wffcolspref.css.aspx endpoint of staffwiki v7.0.1.19219 allows attackers to execute arbitrary Javascript in the context of the user's browser via a crafted HTTP request...
CVE-2026-29969
A cross-site scripting XSS vulnerability in the wffcolspref.css.aspx endpoint of staffwiki v7.0.1.19219 allows attackers to execute arbitrary Javascript in the context of the user's browser via a crafted HTTP request...
PT-2026-28392
Name of the Vulnerable Software and Affected Versions staffwiki version 7.0.1.19219 Description A cross-site scripting XSS issue exists in staffwiki. This allows attackers to execute arbitrary Javascript in the context of a user's browser through a crafted HTTP request. The vulnerable API endpoin...
CVE-2026-29969
A cross-site scripting XSS vulnerability in the wffcolspref.css.aspx endpoint of staffwiki v7.0.1.19219 allows attackers to execute arbitrary Javascript in the context of the user's browser via a crafted HTTP request...
WorkflowFirst StaffWiki 安全漏洞
WorkflowFirst StaffWiki is an internal knowledge management and collaboration platform provided by the US company WorkflowFirst. Version 7.0.1.19219 of StaffWiki has a security vulnerability. This vulnerability stems from a cross-site scripting vulnerability present in the wff colspref.css.aspx...
CVE-2026-29969
CVE-2026-29969 is an XSS vulnerability in the wff_cols_pref.css.aspx endpoint of staffwiki v7.0.1.19219. A crafted HTTP request can execute arbitrary JavaScript in the victim’s browser. Affected component: staffwiki, version 7.0.1.19219. CVSS 3.1 base score 6.1 (Network, Low attack complexity, No...