CVE-2026-89307
2026-09-15
16h17 +00:00
16h17 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
CVE 描述
The "Firma Circolare" feature in the "Design Scuole Italia" WordPress theme allows an authenticated attacker to inject arbitrary HTML via the sign parameter, enabling forced redirection of visiting users to an attacker-controlled URL (Stored HTML Injection / Open Redirect).
CVE 資訊
相關弱點
| 弱點名稱 | 來源 | |
|---|---|---|
| URL Redirection to Untrusted Site The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect. |
