NukeViet: Multiple Anti-XSS Filter Bypasses Leading to Stored XSS in News Module

Summary Two filter-bypass techniques in NukeViet\Core\Request::filterAttr and NukeViet\Core\Request::unhtmlentities allow a low-privileged user any account with news post permission to store and serve arbitrary JavaScript to any visitor of the affected page. Affected Component...

CVE-2026-59245

creationtimestamp| type| source ---|---|--- 2026-07-13 17:53:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqkb4bifd22w 2026-07-13 18:20:14+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mqkcm5c5tr2t...

CVE-2026-57433

creationtimestamp| type| source ---|---|--- 2026-07-13 17:42:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqkail55pp2x 2026-07-13 18:25:14+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mqkcv3qd4a24 2026-07-14 02:42:38+00:00| seen|...

CVE-2026-56460

creationtimestamp| type| source ---|---|--- 2026-07-13 16:10:43+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqk3ejjgzx2x 2026-07-13 16:10:44+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mqk3ekopta2m 2026-07-16 08:02:31+00:00| seen|...

CVE-2026-6847

creationtimestamp| type| source ---|---|--- 2026-07-13 14:43:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjwi5ogas2x 2026-07-13 15:12:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqjy3psdgu22 2026-07-13 16:15:03+00:00| seen|...

CVE-2026-15559

creationtimestamp| type| source ---|---|--- 2026-07-13 14:32:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjvvfcbd52l 2026-07-13 15:58:10+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqk2o4m5dg2w 2026-07-13 18:15:31+00:00| seen|...

CVE-2026-15558

creationtimestamp| type| source ---|---|--- 2026-07-13 14:22:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjvdic6pm26 2026-07-13 15:41:47+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mqjzqt552l2o 2026-07-14 02:40:01+00:00| seen|...

CVE-2026-62147

creationtimestamp| type| source ---|---|--- 2026-07-13 14:07:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjuimxr2t2x 2026-07-13 14:27:30+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjvlyzosg2c 2026-07-13 19:27:38+00:00| seen|...

CVE-2026-12257

creationtimestamp| type| source ---|---|--- 2026-07-13 13:37:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjstg74rk2w 2026-07-13 14:37:21+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjw5m3qtw2y 2026-07-13 15:12:04+00:00| seen|...

CVE-2026-9820

creationtimestamp| type| source ---|---|--- 2026-07-13 12:43:11+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjprhnu3x2d 2026-07-13 12:43:12+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mqjprhpk6o2o 2026-07-13 13:36:18+00:00| seen|...

CVE-2026-14934

creationtimestamp| type| source ---|---|--- 2026-07-13 12:00:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116912555902353220 2026-07-13 12:00:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqjnf5zvau2g 2026-07-13 12:10:05+00:00| seen|...

CVE-2026-59523

creationtimestamp| type| source ---|---|--- 2026-07-13 11:57:06+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjn72rpzm2d 2026-07-13 12:45:58+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjpwgtxo52e 2026-07-14 01:51:23+00:00| seen|...

CVE-2026-61985

creationtimestamp| type| source ---|---|--- 2026-07-13 11:54:02+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjmzksnuu2a 2026-07-13 12:46:45+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjpxttvs52e 2026-07-13 14:12:44+00:00| seen|...

CVE-2026-57738

creationtimestamp| type| source ---|---|--- 2026-07-13 11:24:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqjldylgvv2h 2026-07-13 11:24:30+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjler6l6c2w 2026-07-13 11:28:13+00:00| seen|...

CVE-2026-57719

creationtimestamp| type| source ---|---|--- 2026-07-13 11:20:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqjl4ur7zb2b 2026-07-13 11:23:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjlchorxn24 2026-07-13 11:29:15+00:00| seen|...

CVE-2026-57726

creationtimestamp| type| source ---|---|--- 2026-07-13 11:18:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjkzjborp27 2026-07-13 11:18:32+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjl23jjqs2w 2026-07-13 11:22:05+00:00| seen|...

CVE-2026-59518

creationtimestamp| type| source ---|---|--- 2026-07-13 11:05:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjkc6f45w2l 2026-07-13 11:30:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqjlorfkkl2w 2026-07-13 11:55:15+00:00| seen|...

CVE-2026-57739

creationtimestamp| type| source ---|---|--- 2026-07-13 11:01:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjk47dll32g 2026-07-13 11:24:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqjle25nl22b 2026-07-13 11:25:20+00:00| seen|...

CVE-2026-57768

creationtimestamp| type| source ---|---|--- 2026-07-13 10:58:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjjwtdbq32z 2026-07-13 11:32:44+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjlsx6hqk2a 2026-07-16 07:57:31+00:00| seen|...

CVE-2026-57714

creationtimestamp| type| source ---|---|--- 2026-07-13 10:56:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjjrvbgcs2g 2026-07-13 11:11:34+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjknmwz7j2a 2026-07-13 11:20:04+00:00| seen|...