Lucene search
+L

6 matches found

Tenable Nessus
Tenable Nessus
•added 2026/09/27 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2026-100694

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Hugo is a static site generator. In versions from v0.56.0 through v0.165.x, content files mapped to the text/org media type are rendered without escaping raw...

6.1CVSS5.5AI score0.00188EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/26 2:16 p.m.•9 views

CVE-2026-100694

Hugo is a static site generator. In versions from v0.56.0 through v0.165.x, content files mapped to the text/org media type are rendered without escaping raw HTML: Org export blocks and @@html:...@@ snippets pass HTML through unescaped, resulting in cross-site scripting XSS in the generated site...

6.1CVSS0.00188EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/26 1:23 p.m.•34 views

CVE-2026-100694 Hugo before 0.166.0 Cross-Site Scripting via text/org

Hugo is a static site generator. In versions from v0.56.0 through v0.165.x, content files mapped to the text/org media type are rendered without escaping raw HTML: Org export blocks and @@html:...@@ snippets pass HTML through unescaped, resulting in cross-site scripting XSS in the generated site...

6.1CVSS0.00188EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/26 1:23 p.m.•16 views

CVE-2026-100694

Hugo is a static site generator. In versions from v0.56.0 through v0.165.x, content files mapped to the text/org media type are rendered without escaping raw HTML: Org export blocks and @@html:...@@ snippets pass HTML through unescaped, resulting in cross-site scripting XSS in the generated site...

6.1CVSS5.5AI score0.00188EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/26 1:23 p.m.•7 views

EUVD-2026-87667

Hugo is a static site generator. In versions from v0.56.0 through v0.165.x, content files mapped to the text/org media type are rendered without escaping raw HTML: Org export blocks and @@html:...@@ snippets pass HTML through unescaped, resulting in cross-site scripting XSS in the generated site...

6.1CVSS5.5AI score0.00188EPSS
SaveExploits0References2
OSV
OSV
•added 2026/09/26 1:23 p.m.•5 views

CVE-2026-100694 Hugo before 0.166.0 Cross-Site Scripting via text/org

Hugo is a static site generator. In versions from v0.56.0 through v0.165.x, content files mapped to the text/org media type are rendered without escaping raw HTML: Org export blocks and @@html:...@@ snippets pass HTML through unescaped, resulting in cross-site scripting XSS in the generated site...

5.1CVSS5.5AI score
SaveExploits0References4
Rows per page
Query Builder