3 matches found
WP 6.5 - 7.1.3 - Contributor+ Stored DoS via Interactivity API Bindings
Description WordPress does not safely handle certain Interactivity API binding values in some cases, which could allow users with contributor-level access and above to break page interactivity for users viewing the affected content. This also affects the Gutenberg plugin...
EUVD-2026-70533
A vulnerability in MISP's event template handling allowed an authenticated user with permission to create or modify event templates to bypass validation of the template definition field. The EventTemplate::beforeValidate method only performed semantic validation when the supplied definition was...
PT-2026-85083
A vulnerability in MISP's event template handling allowed an authenticated user with permission to create or modify event templates to bypass validation of the template definition field. The EventTemplate::beforeValidate method only performed semantic validation when the supplied definition was...