Lucene search
K

4 matches found

NVD
NVD
added 2026/05/15 1:16 p.m.9 views

CVE-2026-41553

PDF Export Module used in DHTMLX's products Gantt and Scheduler is vulnerable to Remote Code Execution due to lack of "data" parameter sanitization. An unauthenticated attacker can inject the malicious JavaScript code to the parameter whose value is processed by Node.js and subsequently executed...

10CVSS0.00335EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/05/15 12:31 p.m.6 views

CVE-2026-41553

PDF Export Module used in DHTMLX's products Gantt and Scheduler is vulnerable to Remote Code Execution due to lack of "data" parameter sanitization. An unauthenticated attacker can inject the malicious JavaScript code to the parameter whose value is processed by Node.js and subsequently executed...

10CVSS6AI score0.00335EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2026/05/15 12:31 p.m.39 views

CVE-2026-41553 Remote Code Execution in PDF Export Module

PDF Export Module used in DHTMLX's products Gantt and Scheduler is vulnerable to Remote Code Execution due to lack of "data" parameter sanitization. An unauthenticated attacker can inject the malicious JavaScript code to the parameter whose value is processed by Node.js and subsequently executed...

10CVSS0.00335EPSS
Exploits0References2
CNNVD
CNNVD
added 2021/06/21 12:0 a.m.2 views

WordPress 跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress Jannah WordPress theme versions prior to...

6.1CVSS5.9AI score0.02005EPSS
Exploits2References1
Rows per page
Query Builder