CVE-2026-55664: Exposure of Sensitive Information to an Unauthorized Actor

Grist is spreadsheet software using Python as its formula language. Prior to 1.7.15, the GET /forms endpoint read table and column metadata without applying the document's access rules and did not check that the requested section was actually a form. A user with only partial read access, includin...

PT-2021-16384

Name of the Vulnerable Software and Affected Versions: User Registration, Login Form, User Profile & Membership WordPress plugin versions prior to 3.2.3 Description: The issue is related to a Reflected Cross-Site Scripting problem. It occurs because the data parameter of the pp get forms by build...