Lucene search
+L

3 matches found

NVD
NVD
•added 2026/06/17 3:16 p.m.•28 views

CVE-2026-10850

Plane CE 1.3.1 allows a low-privileged project member to submit arbitrary HTML/JS in the descriptionhtml field when creating an intake work item through the API v1 intake endpoint...

6.9CVSS0.00165EPSS
SaveExploits1References2
EUVD
EUVD
•added 2026/06/17 2:39 p.m.•24 views

EUVD-2026-37732

Plane CE 1.3.1 allows a low-privileged project member to submit arbitrary HTML/JS in the descriptionhtml field when creating an intake work item through the API v1 intake endpoint...

6.9CVSS5.4AI score0.00165EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/17 12:00 a.m.•1 views

CVE-2026-10850: Improper Neutralization of Input During Web Page Generation

Plane CE 1.3.1 allows a low-privileged project member to submit arbitrary HTML/JS in the descriptionhtml field when creating an intake work item through the API v1 intake endpoint...

6.9CVSS5.9AI score0.00165EPSS
SaveExploits1References4
Rows per page
Query Builder