CVE-2026-4420

Summary: CVE-2026-4420 affects Bludit with a Stored XSS in the “page creating” flow. An authenticated user with page-creation privileges (Author/Editor/Admin) can insert a malicious script into the tags field when creating an article. The payload executes when a victim visits the uploaded resourc...

PT-2023-11585 · Freeimage +1 · Freeimage +1

Name of the Vulnerable Software and Affected Versions: FreeImage version 3.18.0 Description: The issue is a Buffer Overflow vulnerability in the function C IStream::read in PluginEXR.cpp. This allows remote attackers to run arbitrary code and cause other impacts via a crafted image file...