4042 matches found
CVE-2026-13229 Zammad 7.0.1 - Improper authorization in ticket article attachment cloning
Zammad 7.1.0 contains an authenticated improper authorization vulnerability in the ticket article attachment cloning endpoint...
EUVD-2026-52856
Zammad 7.1.0 contains an authenticated improper authorization vulnerability in the ticket article attachment cloning endpoint...
CVE-2026-13229
Zammad 7.1.0 contains an authenticated improper authorization vulnerability in the ticket article attachment cloning endpoint...
CVE-2026-13229 Zammad 7.0.1 - Improper authorization in ticket article attachment cloning
Zammad 7.1.0 contains an authenticated improper authorization vulnerability in the ticket article attachment cloning endpoint...
CVE-2026-13229: Missing Authorization
Zammad 7.1.0 contains an authenticated improper authorization vulnerability in the ticket article attachment cloning endpoint...
PT-2026-67808
Name of the Vulnerable Software and Affected Versions Zammad version 7.1.0 Description An authenticated improper authorization issue exists in the ticket article attachment cloning endpoint. Improper authorization occurs when a system fails to properly verify if a user has the necessary permissio...
CVE-2026-52520
Emlog CMS = 2.6.14 contains a stored cross-site scripting XSS vulnerability in the article publishing module /admin/article.php. A remote authenticated attacker can inject arbitrary JavaScript code via the article content. When an administrator reviews or previews the submitted article in the...
CVE-2026-52520
Emlog CMS = 2.6.14 contains a stored cross-site scripting XSS vulnerability in the article publishing module /admin/article.php. A remote authenticated attacker can inject arbitrary JavaScript code via the article content. When an administrator reviews or previews the submitted article in the...
CVE-2026-52520
Emlog CMS = 2.6.14 contains a stored cross-site scripting XSS vulnerability in the article publishing module /admin/article.php. A remote authenticated attacker can inject arbitrary JavaScript code via the article content. When an administrator reviews or previews the submitted article in the...
CVE-2026-52520: Improper Neutralization of Input During Web Page Generation
Emlog CMS = 2.6.14 contains a stored cross-site scripting XSS vulnerability in the article publishing module /admin/article.php. A remote authenticated attacker can inject arbitrary JavaScript code via the article content. When an administrator reviews or previews the submitted article in the...
CVE-2026-52520
Emlog CMS = 2.6.14 contains a stored cross-site scripting XSS vulnerability in the article publishing module /admin/article.php. A remote authenticated attacker can inject arbitrary JavaScript code via the article content. When an administrator reviews or previews the submitted article in the...
PT-2026-67516
Name of the Vulnerable Software and Affected Versions Emlog CMS versions prior to 2.6.15 Description A stored cross-site scripting XSS issue exists in the article publishing module at the '/admin/article.php' endpoint. A remote authenticated attacker can inject arbitrary JavaScript code through t...
EUVD-2026-52484
Emlog CMS = 2.6.14 contains a stored cross-site scripting XSS vulnerability in the article publishing module /admin/article.php. A remote authenticated attacker can inject arbitrary JavaScript code via the article content. When an administrator reviews or previews the submitted article in the...
CVE-2026-52520
Emlog CMS versions
July 28, 2026âKB5101681 (OS Build 28000.2608) Preview
None None...
CVE-2026-64796
Joomla Extension - regularlabs.com - various code injection vectors in Sourcerer extension - Free did not require both the article creator and last modifier to be Super Users before executing article PHP. Pro did not consistently enforce configured CSS, JavaScript and PHP permissions across tags,...
EUVD-2026-47811
Free did not require both the article creator and last modifier to be Super Users before executing article PHP. Pro did not consistently enforce configured CSS, JavaScript and PHP permissions across tags, attributes, files and both article owners. PHP include attributes could also escape the...
CVE-2026-64796
The Sourcerer extension for Joomla (by regularlabs.com) contains multiple code injection vectors . In the Free version , PHP code within an article can be executed because the system fails to verify that both the article creator and the last modifier possess Super User privileges. The Pro version...
CVE-2026-64796 Joomla Extension - regularlabs.com - various code injection vectors in Sourcerer extension
Joomla Extension - regularlabs.com - various code injection vectors in Sourcerer extension - Free did not require both the article creator and last modifier to be Super Users before executing article PHP. Pro did not consistently enforce configured CSS, JavaScript and PHP permissions across tags,...
EUVD-2026-47563
Feedbin commit 739884a contains an unauthenticated information disclosure vulnerability that allows unauthenticated attackers to retrieve private article content by sending requests to the entries text API endpoint, which skips the authorization before-action filter entirely. Attackers can iterat...