CVE-2026-86749 snipe-it before 8.7.0 Data Loss via Failed Image Write

Snipe-IT versions put... call still caused the application to delete the previous image via deleteExistingImage and to reassign and persist the model's image reference to the new filename, destroying the existing image and leaving the database row pointing at a file that was never written. A mirr...

EUVD-2026-74926

Snipe-IT versions put... call still caused the application to delete the previous image via deleteExistingImage and to reassign and persist the model's image reference to the new filename, destroying the existing image and leaving the database row pointing at a file that was never written. A mirr...

WordPress Drag and Drop File Upload for Elementor Forms plugin <= 1.6.0 - Unauthenticated Arbitrary File Upload via 'type' Parameter vulnerability

Unauthenticated Arbitrary File Upload via 'type' Parameter vulnerability discovered by Adam Rayyan Aryasatya in WordPress Plugin Drag and Drop File Upload for Elementor Forms versions = 1.6.0...

WordPress Kali Forms — Contact Form & Drag-and-Drop Builder plugin < 2.4.17 - Unauthenticated Media Upload vulnerability

Unauthenticated Media Upload vulnerability discovered by Alexander Jurkschat in WordPress Plugin Kali Forms versions 2.4.17...

CVE-2026-65181

Insufficient authorization of Data Source tables in Impala 2.7-4.5 allows a client with privileges to upload a file to remote storage and create a table to execute arbitrary Java code. Users are recommended to upgrade to version 4.5.2, which fixes this issue...

EUVD-2026-74800

Insufficient authorization of Data Source tables in Impala 2.7-4.5 allows a client with privileges to upload a file to remote storage and create a table to execute arbitrary Java code. Users are recommended to upgrade to version 4.5.2, which fixes this issue...

Multiple vulnerabilities in baserCMS plugin "BurgerEditor"

Overview baserCMS plugin "BurgerEditor" provided by D-ZERO CO.,LTD. contains multiple vulnerabilities listed below: Authorization Bypass Through User-Controlled Key CWE-639 - CVE-2026-84062 Unrestricted Upload of File with Dangerous Type CWE-434 - CVE-2026-84063 Kuniyoshi Noguchi @KuniNogu report...

CVE-2025-7062 Stored Cross-Site Scripting via file upload in H5P module (h5p-nodejs-library) of Lumi Education

A stored cross-site scripting XSS vulnerability has been identified in the H5P module h5p-nodejs-library by Lumi Education UG in versions up to and including 10.0.4. The library allows users to upload H5P content that contains malicious JavaScript. This code is then executed in the browsers of...

CVE-2025-7062

CVE-2025-7062 is a stored cross-site scripting (XSS) vulnerability in the H5P module h5p-nodejs-library by Lumi Education UG , affecting versions up to and including 10.0.4 . The library allows users to upload H5P content containing malicious JavaScript, which is then executed in the browsers of ...

CVE-2025-7062 Stored Cross-Site Scripting via file upload in H5P module (h5p-nodejs-library) of Lumi Education

A stored cross-site scripting XSS vulnerability has been identified in the H5P module h5p-nodejs-library by Lumi Education UG in versions up to and including 10.0.4. The library allows users to upload H5P content that contains malicious JavaScript. This code is then executed in the browsers of...

CVE-2025-7062 Stored Cross-Site Scripting via file upload in H5P module (h5p-nodejs-library) of Lumi Education

A stored cross-site scripting XSS vulnerability has been identified in the H5P module h5p-nodejs-library by Lumi Education UG in versions up to and including 10.0.4. The library allows users to upload H5P content that contains malicious JavaScript. This code is then executed in the browsers of...

PT-2026-89163

An arbitrary file upload and path traversal vulnerability exists in LZ-litchi 1.0.0. Unauthenticated remote attackers can upload arbitrary files and write them outside the intended storage directory via the directory parameter in POST /app-api/infra/file/upload...

PT-2026-89057

Rara One Click Demo Import plugin for WordPress before 1.3.5 contains an arbitrary file upload vulnerability that allows authenticated attackers with Administrator privileges to upload arbitrary PHP files by passing a false value to wp handle upload that disables WordPress core's file type...

CVE-2026-71805

A critical arbitrary file upload and path traversal vulnerability exists in LZ-litchi 1.0.0 . Unauthenticated remote attackers can exploit the directory parameter in the POST /app-api/infra/file/upload endpoint to upload arbitrary files and write them outside the intended storage directory. Explo...

Ultimate Table Field - Critical - Access bypass - SA-CONTRIB-2026-153

The Ultimate Table Field module enables you to store table data in a field and edit each table cell through a dialog, using cell field plugins such as text, link, and file. The module doesn't sufficiently protect the route that opens the cell editor dialog. The route is accessible to anonymous...

CVE-2026-71805

An arbitrary file upload and path traversal vulnerability exists in LZ-litchi 1.0.0. Unauthenticated remote attackers can upload arbitrary files and write them outside the intended storage directory via the directory parameter in POST /app-api/infra/file/upload...

CVE-2026-71805

An arbitrary file upload and path traversal vulnerability exists in LZ-litchi 1.0.0. Unauthenticated remote attackers can upload arbitrary files and write them outside the intended storage directory via the directory parameter in POST /app-api/infra/file/upload...

CVE-2026-75307

zhitan-ems 1.0.0 is vulnerable to Cross Site Scripting XSS via SVG file upload through the /equipmentFile/upload endpoint...

PT-2026-89166

yshopmall =3.3 is vulnerable to Cross Site Scripting XSS. The file upload endpoint /api/upload of the system lacks file type validation. Attackers can upload files of any type, including HTML, JSP, and other executable files...

CVE-2026-75307: Improper Neutralization of Input During Web Page Generation

zhitan-ems 1.0.0 is vulnerable to Cross Site Scripting XSS via SVG file upload through the /equipmentFile/upload endpoint...