Lucene search
+L

506087 matches found

Cvelist
Cvelist
•added 2026/09/11 11:15 a.m.•45 views

CVE-2026-89256 AVideo Bookmark Plugin Stored XSS via Chapter Names

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the Bookmark plugin where chapter names are not encoded before being concatenated into public watch-page HTML. A video owner can inject malicious scripts via the bookmark name...

9.3CVSS0.00367EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/11 11:15 a.m.•8 views

EUVD-2026-76067

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the LoginControl plugin that fails to HTML-encode PGP public keys echoed into a textarea element. An authenticated attacker can inject malicious JavaScript by submitting a crafte...

9.3CVSS5.6AI score0.00367EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/09/11 11:15 a.m.•12 views

CVE-2026-89253 AVideo Stored XSS via donationLink in watch page button

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the user 'donationLink' profile field. User::setDonationLink objects/user.php stores the value and save validates it only with filtervar..., FILTERVALIDATEURL, which accepts...

9.3CVSS5.7AI score0.00367EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/11 11:15 a.m.•12 views

CVE-2026-89247

WWBN AVideo at commit c3edcc274c389816d434acadac07ee78eaf330c1 and earlier contains an XML injection in plugin/AD_Server/VMAP.php, reachable without authentication when the AD_Server plugin is enabled. The timeOffset and idTag values from the base64- and JSON-decoded $_REQUEST['vmaps'] parameter ...

6.1CVSS6AI score0.00362EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/11 11:15 a.m.•44 views

CVE-2026-89247 WWBN AVideo XML Injection via plugin/AD_Server/VMAP.php

WWBN AVideo at commit c3edcc274c389816d434acadac07ee78eaf330c1 and earlier contains an XML injection vulnerability in plugin/ADServer/VMAP.php, which is reachable without authentication when the ADServer plugin is enabled. The script emits Content-Type: application/xml and writes the timeOffset a...

6.1CVSS0.00362EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/09/11 11:15 a.m.•8 views

CVE-2026-89247 WWBN AVideo XML Injection via plugin/AD_Server/VMAP.php

WWBN AVideo at commit c3edcc274c389816d434acadac07ee78eaf330c1 and earlier contains an XML injection vulnerability in plugin/ADServer/VMAP.php, which is reachable without authentication when the ADServer plugin is enabled. The script emits Content-Type: application/xml and writes the timeOffset a...

6.1CVSS6AI score0.00362EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/11 11:15 a.m.•12 views

EUVD-2026-76059

WWBN AVideo at commit c3edcc274c389816d434acadac07ee78eaf330c1 and earlier contains an XML injection vulnerability in plugin/ADServer/VMAP.php, which is reachable without authentication when the ADServer plugin is enabled. The script emits Content-Type: application/xml and writes the timeOffset a...

6.1CVSS6AI score0.00362EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/11 11:15 a.m.•14 views

CVE-2026-89246

WWBN AVideo (through commit c3edcc274c389816d434acadac07ee78eaf330c1) is affected by a CSV formula injection vulnerability in the myComments.download.php endpoint. The root cause is a failure to sanitize spreadsheet formula prefixes (=, +, -, @) in comment text before CSV export. An authenticated...

5.4CVSS5.8AI score0.00235EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/11 11:15 a.m.•13 views

EUVD-2026-76058

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a CSV formula injection vulnerability in the myComments.download.php endpoint that fails to sanitize spreadsheet formula prefixes in comment text. Authenticated users can inject formulas starting with =, +, -, or @...

5.4CVSS5.8AI score0.00235EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/11 11:15 a.m.•42 views

CVE-2026-89246 WWBN AVideo CSV Formula Injection via myComments.download.php

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a CSV formula injection vulnerability in the myComments.download.php endpoint that fails to sanitize spreadsheet formula prefixes in comment text. Authenticated users can inject formulas starting with =, +, -, or @...

5.4CVSS0.00235EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/09/11 11:15 a.m.•12 views

CVE-2026-89243 WWBN AVideo Stored XSS via UserGroups setGroup_name

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in UserGroups::setGroupname that fails to sanitize groupname input. Administrators with canAdminUserGroups permission can inject malicious HTML and JavaScript that executes in...

9.2CVSS5.6AI score0.00382EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/09/11 11:06 a.m.•6 views

Improper Output Neutralization for Logs

Overview org.webjars.npm:morgan is a HTTP request logger middleware for node.js. Affected versions of this package are vulnerable to Improper Output Neutralization for Logs via the escapeLogField function. An attacker can manipulate log entries by injecting unescaped double quotes into HTTP heade...

6.9CVSS5.7AI score0.0041EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/09/11 11:06 a.m.•7 views

Improper Output Neutralization for Logs

Overview morgan is a HTTP request logger middleware for node.js. Affected versions of this package are vulnerable to Improper Output Neutralization for Logs via the escapeLogField function. An attacker can manipulate log entries by injecting unescaped double quotes into HTTP headers such as...

6.9CVSS5.8AI score0.0041EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2026/09/11 10:56 a.m.•9 views

WordPress MetForm plugin < 4.1.9 - Unauthenticated Email Header Injection vulnerability

Unauthenticated Email Header Injection vulnerability discovered by Artus KG in WordPress Plugin Metform versions 4.1.9...

4.8CVSS5.7AI score0.00243EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2026/09/11 10:56 a.m.•10 views

CVE-2026-86813 MetForm < 4.1.9 - Unauthenticated Email Header Injection via Notification Reply-To

The MetForm WordPress plugin before 4.1.9 does not properly neutralize newline characters in user-submitted values that are placed into notification email headers, allowing unauthenticated attackers to inject additional email headers, such as Bcc, into the emails the site sends when a submitted...

4.8CVSS5.6AI score0.00243EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/11 10:56 a.m.•23 views

CVE-2026-86813

CVE-2026-86813 affects the MetForm WordPress plugin prior to version 4.1.9 . The vulnerability resides in how the plugin handles newline characters in user-submitted values that are placed into notification email headers, specifically the Reply-To field. An unauthenticated attacker can inject add...

4.8CVSS5.6AI score0.00243EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/11 10:56 a.m.•11 views

EUVD-2026-76041

The MetForm WordPress plugin before 4.1.9 does not properly neutralize newline characters in user-submitted values that are placed into notification email headers, allowing unauthenticated attackers to inject additional email headers, such as Bcc, into the emails the site sends when a submitted...

4.8CVSS5.6AI score0.00243EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/11 10:56 a.m.•42 views

CVE-2026-86813 MetForm < 4.1.9 - Unauthenticated Email Header Injection via Notification Reply-To

The MetForm WordPress plugin before 4.1.9 does not properly neutralize newline characters in user-submitted values that are placed into notification email headers, allowing unauthenticated attackers to inject additional email headers, such as Bcc, into the emails the site sends when a submitted...

4.8CVSS0.00243EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/09/11 10:21 a.m.•11 views

CVE-2026-87859

A flaw was found in morgan, an HTTP request logger middleware for Node.js. An unauthenticated remote attacker can exploit this vulnerability by injecting an unescaped double quote into a log field they control, such as the User-Agent or Referer header. This causes the log field to close...

5.3CVSS5.8AI score0.0041EPSS
SaveExploits0References5
OSV
OSV
•added 2026/09/11 10:16 a.m.•9 views

DEBIAN-CVE-2026-87859

morgan is an HTTP request logger middleware for Node.js. In versions before 1.12.1, its escapeLogField function does not escape the double quote character, which delimits the quoted fields of the Apache combined log format that morgan emits. An unauthenticated remote attacker who controls a value...

5.3CVSS5.9AI score0.0041EPSS
SaveExploits0References1
Rows per page
Query Builder