CVE-2026-59167 SunEditor: Critical XSS vulnerability - sanitizer bypass

SunEditor is a lightweight and powerful WYSIWYG editor in vanilla JavaScript with no dependencies. Prior to 2.47.11, the sanitizer in src/lib/core.js does not consistently reject namespaced or custom HTML elements, allowing event-handler attributes to remain on crafted elements. When an applicati...

CVE-2026-59167 SunEditor: Critical XSS vulnerability - sanitizer bypass

SunEditor is a lightweight and powerful WYSIWYG editor in vanilla JavaScript with no dependencies. Prior to 2.47.11, the sanitizer in src/lib/core.js does not consistently reject namespaced or custom HTML elements, allowing event-handler attributes to remain on crafted elements. When an applicati...

CVE-2026-91790

Foxit PDF Editor/Reader is vulnerable to a Use-After-Free (UAF) vulnerability during the rendering of page images. The issue stems from a failure to properly validate image objects containing malformed optional content attributes , which leads the application to access an already-freed internal d...

EUVD-2026-85132

When rendering the page image, Foxit PDF Editor/Reader fails to perform validation on image objects whose optional content attributes are malformed. As a result, the program may access an already-freed internal data structure, triggering a crash due to UAF...

EUVD-2026-85129

When opening a specially crafted PDF, Foxit PDF Editor/Reader executes scripts that modify annotation rich-text attributes containing malformed font data. During subsequent annotation appearance reconstruction, it accesses an object after it has been released, resulting in a use-after-free...

CVE-2026-91793 Foxit PDF Editor/Reader Doc Object Use-After-Free Information Disclosure Vulnerability

When opening a specially crafted PDF, Foxit PDF Editor/Reader executes scripts that modify annotation rich-text attributes containing malformed font data. During subsequent annotation appearance reconstruction, it accesses an object after it has been released, resulting in a use-after-free...

CVE-2026-85006

The HappyAddons for Elementor WordPress plugin before 3.50.0 does not escape an icon value on one of its button widgets before outputting it inside an HTML attribute, allowing users with Contributor-level access and above to inject event-handler attributes that execute JavaScript in the browser o...

CVE-2026-85006

The HappyAddons for Elementor WordPress plugin versions prior to 3.50.0 is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The root cause is a failure to escape an icon value on one of its button widgets before it is outputted inside an HTML attribute. This allows users with Contributor-l...

Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-162

The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data. The module does not sufficiently restrict access to the custom attributes YAML editor. Users with permission to create or edit webforms but without permission to edit...

The vulnerability of PDF viewing and editing programs developed by Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat 2024 lies in the inability to control the unauthorized modification of object prototype attributes. This allows attackers to gain unauthorized access to protected information.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat 2024 lies in the uncontrolled modification of prototype attributes of objects. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...

CVE-2026-91793: Use After Free

When opening a specially crafted PDF, Foxit PDF Editor/Reader executes scripts that modify annotation rich-text attributes containing malformed font data. During subsequent annotation appearance reconstruction, it accesses an object after it has been released, resulting in a use-after-free...

CVE-2026-73858: Improper Neutralization of Special Elements Used in a Template Engine

Solspace Freeform plugin for Craft CMS 5.x is a super flexible form-building tool. From 5.0.0 through 5.10.13, submitted values from public Freeform forms can be evaluated by the isolated Twig renderer when rendered into HTML attributes. An unauthenticated attacker can place Twig expressions in...

CVE-2026-61834: Improperly Controlled Modification of Dynamically-Determined Object Attributes

scim-patch is a library for applying SCIM patch operations. Prior to 0.9.2, navigate reads inherited properties and assign uses prototype-chain membership checks while resolving attacker-controlled SCIM PATCH paths. A path or one of the dotted value keys beginning with an inherited property such ...

CVE-2026-59167: Improper Neutralization of Input During Web Page Generation

SunEditor is a lightweight and powerful WYSIWYG editor in vanilla JavaScript with no dependencies. Prior to 2.47.11, the sanitizer in src/lib/core.js does not consistently reject namespaced or custom HTML elements, allowing event-handler attributes to remain on crafted elements. When an applicati...

CVE-2026-77912

A stored cross-site scripting XSS vulnerability was identified in GitHub Enterprise Server that allowed an authenticated attacker to inject arbitrary HTML attributes into rendered Markdown because the Markdown rendering pipeline rewrote quote characters in already-sanitized HTML without...

Improper Validation Of Cookie Domain Attributes

Http4s is vulnerable to improper validation of cookie domain attributes. The vulnerability is due to the CookieJar client middleware accepting a response cookie’s Domain attribute without validating that it matches the response host, which allows an attacker controlling or compromising a server t...

CVE-2026-77912: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability was identified in GitHub Enterprise Server that allowed an authenticated attacker to inject arbitrary HTML attributes into rendered Markdown because the Markdown rendering pipeline rewrote quote characters in already-sanitized HTML without...

PT-2026-96647

Name of the Vulnerable Software and Affected Versions Contextual Related Posts versions prior to 4.4.2 Description Insufficient input sanitization and output escaping allow authenticated attackers with author-level access and above to perform Stored Cross-Site Scripting. This is achieved by...

CVE-2026-93056

A flaw was found in the Linux kernel. Specifically, within the USB gadget audio class 1 UAC1 legacy driver, a programming error related to handling string attributes could lead to a critical system failure. A local attacker could trigger this vulnerability by attempting to write to certain...

CVE-2026-93339

Metaphor Creations Ditty (WordPress plugin ditty-news-ticker) before 3.1.70 contains a stored XSS vulnerability in the ditty_layout_render_tag_wrapper() function. The function inserts caller-supplied wrapper attribute values directly as HTML element names without allowlist validation , bypassing ...