PT-2026-96763

Name of the Vulnerable Software and Affected Versions php-file-manager-with-code-editor versions prior to 3.1 Description An unrestricted file upload issue exists in the Save Handler component. A remote attacker can manipulate the filename and content arguments within the file put contents functi...

PT-2026-96727

Name of the Vulnerable Software and Affected Versions php-file-manager-with-code-editor versions prior to 3.1 Description A flaw in the move uploaded file function within the filemanager.php file allows for unrestricted file upload. This issue can be exploited remotely by manipulating the files...

CVE-2026-94504: Improper Neutralization of Input During Web Page Generation

Ninja Forms 3.15.3 stores an anonymous non-RTE textarea value and renders it without safe HTML encoding in the legacy submission editor. An attacker can break out of the textarea with stored script. When an Administrator opens the attacker-known direct submission URL, the script runs in the...

CVE-2026-94372 Stored Cross-Site Scripting via Unescaped Galaxy Cluster Tag Names in MISP Default Theme Galaxies Index

MISP contains a stored cross-site scripting XSS vulnerability in the default theme's Galaxies index page. When a MISP instance detects unknown custom or default galaxy clusters during synchronization, it renders sample tag names in an informational notice directed at site administrators. In the...

CVE-2026-94372 Stored Cross-Site Scripting via Unescaped Galaxy Cluster Tag Names in MISP Default Theme Galaxies Index

MISP contains a stored cross-site scripting XSS vulnerability in the default theme's Galaxies index page. When a MISP instance detects unknown custom or default galaxy clusters during synchronization, it renders sample tag names in an informational notice directed at site administrators. In the...

CVE-2026-94372

MISP versions below 2.5.47 contain a stored cross-site scripting (XSS) vulnerability in the default theme's Galaxies index page . When the instance detects unknown galaxy clusters during synchronization, it renders sample tag names in an informational notice to site administrators. In the default...

CVE-2026-94393: Authorization Bypass Through User-Controlled Key

When a user creates or edits a report inside an event, MISP can identify an existing report using its UUID without properly checking whether that report actually belongs to the same event. As a result, a user who has editing rights on one event could potentially move a report from another event...

CVE-2026-94372: Improper Neutralization of Input During Web Page Generation

MISP contains a stored cross-site scripting XSS vulnerability in the default theme's Galaxies index page. When a MISP instance detects unknown custom or default galaxy clusters during synchronization, it renders sample tag names in an informational notice directed at site administrators. In the...

PT-2026-96104

Name of the Vulnerable Software and Affected Versions MISP versions prior to 2.5.47 Description An issue exists where the software identifies existing reports using a UUID without verifying if the report belongs to the same event. An attacker with editor access to at least one event who knows or...

PT-2026-95784

Name of the Vulnerable Software and Affected Versions Ibtana – Ecommerce Product Addons versions prior to 0.4.7.8 Description Authenticated users with Subscriber-level access and above can perform unauthorized post meta modification. This is caused by a missing capability check on the 'iepa use g...

CVE-2026-84992

creationtimestamp| type| source ---|---|--- 2026-09-18 18:35:10+00:00| published-proof-of-concept| https://github.com/imzbf/md-editor-v3/security/advisories/GHSA-3rm2-h79c-8qw6 2026-09-19 11:31:49+00:00| seen| https://gist.github.com/alon710/bea1abe85bdbc7360f709e8ba11f8e2a...

CVE-2026-84992

md-editor-v3 is a Markdown editor for Vue 3 developed in JSX and TypeScript. Prior to 6.5.4, MdPreview's useMarkdownIt highlight callback in packages/MdEditor/layouts/Content/composition/useMarkdownIt.ts inserts a fenced-code language value into class and language HTML attributes without escaping...

meadmin-addons-doc (>=1.0.0, <=1.3.14) potentially affected by CVE-2026-84992 via md-editor-v3 (6.3.1)

md-editor-v3 NPM version 6.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on md-editor-v3 and may be impacted: - meadmin-addons-doc =1.0.0, =1.3.14 Source cves: CVE-2026-84992 Source advisory: GHSA-3RM2-H79C-8QW6...

md-editor-v3: XSS via fenced-code language rendering bypass

Summary MdPreview interpolates a fenced-code language into HTML attributes without escaping it. A crafted info string therefore executes JavaScript even when the shipped XSSPlugin is enabled. Details useMarkdownIt packages/MdEditor/layouts/Content/composition/useMarkdownIt.ts:206 registers a...

NPM: md-editor-v3: XSS via fenced-code language rendering bypass

NPM: md-editor-v3: XSS via fenced-code language rendering bypass vulnerability discovered by ? in WordPress Npm md-editor-v3 versions = 6.5.3...

meadmin-addons-doc (>=1.0.0, <=1.3.14) potentially affected by CVE-2026-84992 via md-editor-v3 (6.3.1)

md-editor-v3 NPM version 6.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on md-editor-v3 and may be impacted: - meadmin-addons-doc =1.0.0, =1.3.14 Source cves: CVE-2026-84992 Source advisory: OSV:GHSA-3RM2-H79C-8QW6...

GHSA-3RM2-H79C-8QW6 md-editor-v3: XSS via fenced-code language rendering bypass

Summary MdPreview interpolates a fenced-code language into HTML attributes without escaping it. A crafted info string therefore executes JavaScript even when the shipped XSSPlugin is enabled. Details useMarkdownIt packages/MdEditor/layouts/Content/composition/useMarkdownIt.ts:206 registers a...

CVE-2026-84992 md-editor-v3: XSS via fenced-code language rendering bypass

md-editor-v3 is a Markdown editor for Vue 3 developed in JSX and TypeScript. Prior to 6.5.4, MdPreview's useMarkdownIt highlight callback in packages/MdEditor/layouts/Content/composition/useMarkdownIt.ts inserts a fenced-code language value into class and language HTML attributes without escaping...

CVE-2026-84992 md-editor-v3: XSS via fenced-code language rendering bypass

md-editor-v3 is a Markdown editor for Vue 3 developed in JSX and TypeScript. Prior to 6.5.4, MdPreview's useMarkdownIt highlight callback in packages/MdEditor/layouts/Content/composition/useMarkdownIt.ts inserts a fenced-code language value into class and language HTML attributes without escaping...

CVE-2026-84992

md-editor-v3 , a Markdown editor for Vue 3, contains an XSS vulnerability in MdPreview's useMarkdownIt() highlight callback (useMarkdownIt.ts:206). The fenced-code language value is interpolated into class="language-${language}" and an unquoted language=${language} HTML attribute without escaping...