CVE-2026-115541

HumHub Community Edition 1.19.0 is vulnerable to a stored cross-site scripting (XSS) vulnerability in the friendship confirmation dialog. An authenticated low-privileged member can save malicious HTML in their first and last name fields. When another authenticated user clicks "Friends" on that pr...