2 matches found
CVE-2026-41929
Vvveb before 1.0.8.2 contains an unauthenticated reflected cross-site scripting vulnerability in the visual editor preview renderer that allows attackers to execute arbitrary JavaScript by manipulating the r query parameter and componentajax POST parameter. Attackers can craft a malicious link or...
6.1CVSS6.2AI score0.00243EPSS
SaveExploits0References7
CVE-2026-41929: Improper Neutralization of Input During Web Page Generation
Vvveb before 1.0.8.2 contains an unauthenticated reflected cross-site scripting vulnerability in the visual editor preview renderer that allows attackers to execute arbitrary JavaScript by manipulating the r query parameter and componentajax POST parameter. Attackers can craft a malicious link or...
6.1CVSS6.3AI score0.00243EPSS
SaveExploits0References2
20