Related VulnerabilitiesPoCCVE-2026-0743: WP Content Permission <= 1.2 - Cross-Site ScriptingPoCmixed-active-content: Mixed Active ContentMasterStudy LMS /wp-admin/admin-ajax.php?action=stm_lms_load_content 文件包含漏洞(CVE-2024-3136)WordPress LearnPress /wp-json/lp/v1/load_content_via_ajax 信息泄露漏洞(CVE-2025-11368)广联达OA /GTP/IM/Services/Group/Broadcast/MsgBroadcastContent.aspx SQL 注入漏洞WordPress Plugin Mayosis Core /wp-content/plugins/mayosis-core/library/wave-audio/peaks/remote_dl.php 文件读取漏洞 (CVE-2025-1565)秒优科技-供应链管理系统 /Content/page/attachmentImg.aspx 信息泄露漏洞OpenCode /file/content 文件读取漏洞秒优科技-供应链管理系统 /Content/page/attachmentImg.aspx 文件读取漏洞Toshiba TopAccess /contentwebserver 默认口令漏洞用友NC Cloud /ebvp/infopub/show_download_content;.js SQL 注入漏洞Ghost CMS /ghost/api/content/tags SQL 注入漏洞(CVE-2026-26980)Alfresco Content Services /alfresco/service/api/login 默认口令漏洞