osTicket - Arbitrary File Read

Enhancesoft osTicket versions 1.18.x prior to 1.18.3 and 1.17.x prior to 1.17.7 contain an arbitrary file read vulnerability in the ticket PDF export functionality. A remote attacker can submit a ticket containing crafted rich-text HTML that includes PHP filter expressions which are insufficientl...

CVE-2026-22849

CVE-2026-22849: Saleor의 리치 텍스트 필드에 적절한 HTML 삭제가 없음 개요 필드| 세부 정보 ---|--- CVE ID| CVE-2026-22849 심각도| HIGH 보안 권고| 권고 보기 발견자| Lukasz Rybak 영향을 받는 제품 saleor/saleor 세부 정보 Saleor는 백엔드 HTML 클리너를 실행하지 않고 사용자가 HTML로 리치 텍스트 필드를 수정할 수 있게 허용하여, 악의적인 공격자가 대시보드와 스토어프론트에서 저장형 XSS 공격을 수행할 수 있게 했습니다. 영향 악의적인 직원이 ...

CVE-2026-34212

CVE-2026-34212 Docmost는 attachment 노드 내부의 javascript: URL을 허용했으며, 이를 저장 및 렌더링 과정에서 보존한 후 Docmost 오리진에서 클릭 가능한 앵커로 다시 변환했습니다. 소개 저는 Docmost오픈소스 협업 문서 플랫폼에서 높은 심각도의 저장형 XSS 문제를 식별하고, 책임감 있게 공개하며 재현했습니다. Docmost 공식 사이트는 이 플랫폼을 엔터프라이즈급 온프레미스 위키로 소개하며 300만 회 이상 다운로드 되었다고 밝히고 있으며, 빌니우스 시 , Bechtle , 호주...

CVE-2019-12836

CVE-2019-12836 Приложение JEditor v3.0.5 — WYSIWYG-редактор для JIRA Простой, но мощный редактор форматированного текста для Jira. Импорт HTML-писем, вставка форматированного содержимого, создание шаблонов и предварительное заполнение полей. Производитель продукта Bobronix Сайт производителя...

CVE-2026-90438

The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Paragraph Text RTE Field Submission in all versions up to, and including, 3.15.4 due to insufficient input sanitization and output escaping. This makes it possible...

CVE-2026-85235

The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Rich-Text Textarea Field in all versions up to, and including, 1.57.2 due to insufficient input sanitization and output escaping. This makes it possible fo...

CVE-2026-85235 Forminator Forms <= 1.57.2 - Unauthenticated Stored Cross-Site Scripting via Rich-Text Textarea Field

The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Rich-Text Textarea Field in all versions up to, and including, 1.57.2 due to insufficient input sanitization and output escaping. This makes it possible fo...

CVE-2026-85235 Forminator Forms <= 1.57.2 - Unauthenticated Stored Cross-Site Scripting via Rich-Text Textarea Field

The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Rich-Text Textarea Field in all versions up to, and including, 1.57.2 due to insufficient input sanitization and output escaping. This makes it possible fo...

EUVD-2026-90565

The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Rich-Text Textarea Field in all versions up to, and including, 1.57.2 due to insufficient input sanitization and output escaping. This makes it possible fo...

CVE-2026-85235

The Forminator Forms WordPress plugin (versions up to and including 1.57.2 ) is vulnerable to Stored Cross-Site Scripting (XSS) via the Rich-Text Textarea Field . The root cause is insufficient input sanitization and output escaping , allowing unauthenticated attackers to inject arbitrary web scr...

PT-2026-103738

The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Rich-Text Textarea Field in all versions up to, and including, 1.57.2 due to insufficient input sanitization and output escaping. This makes it possible fo...

CVE-2026-85235: Improper Neutralization of Input During Web Page Generation

The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Rich-Text Textarea Field in all versions up to, and including, 1.57.2 due to insufficient input sanitization and output escaping. This makes it possible fo...

CVE-2026-96326

The HT Contact Form – Drag & Drop Form Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Rich Text Editor Field in all versions up to, and including, 2.10.2 due to insufficient input sanitization and output escaping. This makes it possible for...

EUVD-2026-88602

The HT Contact Form – Drag & Drop Form Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Rich Text Editor Field in all versions up to, and including, 2.10.2 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2026-96326

The HT Contact Form – Drag & Drop Form Builder for WordPress plugin, for versions up to and including 2.10.2 , is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is insufficient input sanitization and output escaping within the Rich Text Editor Field . This allows unauthenticated...

CVE-2026-96326 HT Contact Form – Drag & Drop Form Builder for WordPress <= 2.10.2 Unauthenticated Stored Cross-Site Scripting via Rich Text Editor Field

The HT Contact Form – Drag & Drop Form Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Rich Text Editor Field in all versions up to, and including, 2.10.2 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2026-96326 HT Contact Form – Drag & Drop Form Builder for WordPress <= 2.10.2 Unauthenticated Stored Cross-Site Scripting via Rich Text Editor Field

The HT Contact Form – Drag & Drop Form Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Rich Text Editor Field in all versions up to, and including, 2.10.2 due to insufficient input sanitization and output escaping. This makes it possible for...

PT-2026-102430

Name of the Vulnerable Software and Affected Versions HT Contact Form – Drag & Drop Form Builder for WordPress versions prior to 2.10.3 Description Insufficient input sanitization and output escaping in the Rich Text Editor Field allow unauthenticated attackers to perform Stored Cross-Site...

CVE-2026-96326: Improper Neutralization of Input During Web Page Generation

The HT Contact Form – Drag & Drop Form Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Rich Text Editor Field in all versions up to, and including, 2.10.2 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2026-63205 Zammad: Channel admins can read unauthorized attachments via signature rich-text body

Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, when creating or updating an email signature, Zammad processes inline images referenced in the signature body. If a signature body contains an HTML img tag pointing to any existing attachment, the system copies th...