CVE-2026-14856-TastyIgniter

CVE-2026-14856：TastyIgniter v4.3.0 存储型 XSS 导致账户接管 📌 概述 在 TastyIgniter v4.3.0 的媒体管理器 文件上传功能中发现了一个存储型跨站脚本（XSS）漏洞。由于对上传的 .svg 文件验证与过滤不足，经过身份验证的低权限用户可以上传包含嵌入式 JavaScript 代码的恶意文件。 当管理员查看或预览该上传文件时，载荷会在其会话上下文中执行。通过将此攻击向量与跨站请求伪造（CSRF）相结合，攻击者可以获取管理员的 CSRF 防护令牌，并触发未经授权的管理操作（例如修改账户凭据），最终实现完全的账户接管 。 📊 技术概述...

CVE-2026-57858

Cal.com Cal.diy versions 2.1.1 through 6.2.0 contain a stored cross-site scripting vulnerability in the BookingPageTagManager component that allows authenticated event owners to inject arbitrary JavaScript by supplying a malicious analytics tracking ID without sanitization. Attackers can close th...

CVE-2025-58430 listmonk Vulnerable to CSRF to XSS Chain That Can Lead to Admin Account Takeover

listmonk is a standalone, self-hosted, newsletter and mailing list manager. In versions up to and including 1.1.0, every http request in addition to the session cookie session there included nonce. The value is not checked and validated by the backend, removing nonce allows the requests to be...