CVE-2026-22849

CVE-2026-22849: Saleor 富文本字段缺少适当的 HTML 净化处理 概述 字段| 详情 ---|--- CVE ID| CVE-2026-22849 严重性| HIGH 安全公告| 查看安全公告 发现者| Lukasz Rybak 受影响产品 saleor/saleor 详情 Saleor 允许用户使用 HTML 修改富文本字段，而未在后端运行任何 HTML 净化器，从而允许恶意行为者对仪表板和店面执行存储型 XSS 攻击。 影响 恶意员工可以构造脚本注入来针对其他员工，可能窃取他们的访问令牌和/或刷新令牌。 缓解措施...

osTicket - Arbitrary File Read

Enhancesoft osTicket versions 1.18.x prior to 1.18.3 and 1.17.x prior to 1.17.7 contain an arbitrary file read vulnerability in the ticket PDF export functionality. A remote attacker can submit a ticket containing crafted rich-text HTML that includes PHP filter expressions which are insufficientl...

CVE-2026-34212

CVE-2026-34212 Docmost는 attachment 노드 내부의 javascript: URL을 허용했으며, 이를 저장 및 렌더링 과정에서 보존한 후 Docmost 오리진에서 클릭 가능한 앵커로 다시 변환했습니다. 소개 저는 Docmost오픈소스 협업 문서 플랫폼에서 높은 심각도의 저장형 XSS 문제를 식별하고, 책임감 있게 공개하며 재현했습니다. Docmost 공식 사이트는 이 플랫폼을 엔터프라이즈급 온프레미스 위키로 소개하며 300만 회 이상 다운로드 되었다고 밝히고 있으며, 빌니우스 시 , Bechtle , 호주...

CVE-2019-12836

CVE-2019-12836 애플리케이션 JEditor v3.0.5 - JIRA용 WYSIWYG 편집기 Jira를 위한 간단하면서도 강력한 리치 텍스트 편집기입니다. HTML 이메일 가져오기, 풍부한 콘텐츠 붙여넣기, 템플릿 생성 및 필드 미리 채우기 기능을 제공합니다. 제품 공급업체 Bobronix 공급업체 웹사이트 http://bobronix.com/ CVE 참조 https://vulners.com/cve/CVE-2019-12836 영향을 받는 제품 코드 베이스 JEditor - WYSIWYG Editor for Jira -...

CVE-2026-90438

The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Paragraph Text RTE Field Submission in all versions up to, and including, 3.15.4 due to insufficient input sanitization and output escaping. This makes it possible...

CVE-2026-85235

The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Rich-Text Textarea Field in all versions up to, and including, 1.57.2 due to insufficient input sanitization and output escaping. This makes it possible fo...

CVE-2026-85235 Forminator Forms <= 1.57.2 - Unauthenticated Stored Cross-Site Scripting via Rich-Text Textarea Field

The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Rich-Text Textarea Field in all versions up to, and including, 1.57.2 due to insufficient input sanitization and output escaping. This makes it possible fo...

EUVD-2026-90565

The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Rich-Text Textarea Field in all versions up to, and including, 1.57.2 due to insufficient input sanitization and output escaping. This makes it possible fo...

CVE-2026-85235

The Forminator Forms WordPress plugin (versions up to and including 1.57.2 ) is vulnerable to Stored Cross-Site Scripting (XSS) via the Rich-Text Textarea Field . The root cause is insufficient input sanitization and output escaping , allowing unauthenticated attackers to inject arbitrary web scr...

CVE-2026-85235 Forminator Forms <= 1.57.2 - Unauthenticated Stored Cross-Site Scripting via Rich-Text Textarea Field

The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Rich-Text Textarea Field in all versions up to, and including, 1.57.2 due to insufficient input sanitization and output escaping. This makes it possible fo...

PT-2026-103738

The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Rich-Text Textarea Field in all versions up to, and including, 1.57.2 due to insufficient input sanitization and output escaping. This makes it possible fo...

CVE-2026-85235: Improper Neutralization of Input During Web Page Generation

The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Rich-Text Textarea Field in all versions up to, and including, 1.57.2 due to insufficient input sanitization and output escaping. This makes it possible fo...

CVE-2026-96326

The HT Contact Form – Drag & Drop Form Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Rich Text Editor Field in all versions up to, and including, 2.10.2 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2026-96326 HT Contact Form – Drag & Drop Form Builder for WordPress <= 2.10.2 Unauthenticated Stored Cross-Site Scripting via Rich Text Editor Field

The HT Contact Form – Drag & Drop Form Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Rich Text Editor Field in all versions up to, and including, 2.10.2 due to insufficient input sanitization and output escaping. This makes it possible for...

EUVD-2026-88602

The HT Contact Form – Drag & Drop Form Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Rich Text Editor Field in all versions up to, and including, 2.10.2 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2026-96326 HT Contact Form – Drag & Drop Form Builder for WordPress <= 2.10.2 Unauthenticated Stored Cross-Site Scripting via Rich Text Editor Field

The HT Contact Form – Drag & Drop Form Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Rich Text Editor Field in all versions up to, and including, 2.10.2 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2026-96326

The HT Contact Form – Drag & Drop Form Builder for WordPress plugin, for versions up to and including 2.10.2 , is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is insufficient input sanitization and output escaping within the Rich Text Editor Field . This allows unauthenticated...

CVE-2026-96326: Improper Neutralization of Input During Web Page Generation

The HT Contact Form – Drag & Drop Form Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Rich Text Editor Field in all versions up to, and including, 2.10.2 due to insufficient input sanitization and output escaping. This makes it possible for...

PT-2026-102430

Name of the Vulnerable Software and Affected Versions HT Contact Form – Drag & Drop Form Builder for WordPress versions prior to 2.10.3 Description Insufficient input sanitization and output escaping in the Rich Text Editor Field allow unauthenticated attackers to perform Stored Cross-Site...

CVE-2026-63205 Zammad: Channel admins can read unauthorized attachments via signature rich-text body

Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, when creating or updating an email signature, Zammad processes inline images referenced in the signature body. If a signature body contains an HTML img tag pointing to any existing attachment, the system copies th...