Lucene search
K

8 matches found

EUVD
EUVD
added 2026/03/26 9:31 p.m.1 views

EUVD-2026-16299

A cross-site scripting XSS vulnerability in the wffcolspref.css.aspx endpoint of staffwiki v7.0.1.19219 allows attackers to execute arbitrary Javascript in the context of the user's browser via a crafted HTTP request...

5.9AI score0.00074EPSS
Exploits1References2
NVD
NVD
added 2026/03/26 7:16 p.m.1 views

CVE-2026-29969

A cross-site scripting XSS vulnerability in the wffcolspref.css.aspx endpoint of staffwiki v7.0.1.19219 allows attackers to execute arbitrary Javascript in the context of the user's browser via a crafted HTTP request...

6.1CVSS0.00074EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2026/03/26 12:0 a.m.0 views

CVE-2026-29969

A cross-site scripting XSS vulnerability in the wffcolspref.css.aspx endpoint of staffwiki v7.0.1.19219 allows attackers to execute arbitrary Javascript in the context of the user's browser via a crafted HTTP request...

5.9AI score0.00074EPSS
Exploits1References2
Cvelist
Cvelist
added 2026/03/26 12:0 a.m.22 views

CVE-2026-29969

A cross-site scripting XSS vulnerability in the wffcolspref.css.aspx endpoint of staffwiki v7.0.1.19219 allows attackers to execute arbitrary Javascript in the context of the user's browser via a crafted HTTP request...

0.00074EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2026/03/26 12:0 a.m.3 views

PT-2026-28392

Name of the Vulnerable Software and Affected Versions staffwiki version 7.0.1.19219 Description A cross-site scripting XSS issue exists in staffwiki. This allows attackers to execute arbitrary Javascript in the context of a user's browser through a crafted HTTP request. The vulnerable API endpoin...

6.1CVSS6AI score0.00074EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2026/03/26 12:0 a.m.1 views

CVE-2026-29969

A cross-site scripting XSS vulnerability in the wffcolspref.css.aspx endpoint of staffwiki v7.0.1.19219 allows attackers to execute arbitrary Javascript in the context of the user's browser via a crafted HTTP request...

6AI score0.00074EPSS
Exploits1References1
CNNVD
CNNVD
added 2026/03/26 12:0 a.m.3 views

WorkflowFirst StaffWiki 安全漏洞

WorkflowFirst StaffWiki is an internal knowledge management and collaboration platform provided by the US company WorkflowFirst. Version 7.0.1.19219 of StaffWiki has a security vulnerability. This vulnerability stems from a cross-site scripting vulnerability present in the wff colspref.css.aspx...

6.1CVSS5.9AI score0.00074EPSS
Exploits1References1
CVE
CVE
added 2026/03/26 12:0 a.m.3 views

CVE-2026-29969

CVE-2026-29969 is an XSS vulnerability in the wff_cols_pref.css.aspx endpoint of staffwiki v7.0.1.19219. A crafted HTTP request can execute arbitrary JavaScript in the victim’s browser. Affected component: staffwiki, version 7.0.1.19219. CVSS 3.1 base score 6.1 (Network, Low attack complexity, No...

6.1CVSS5.9AI score0.00074EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder