2 matches found
EUVD-2026-66172
A Stored XSS vulnerability in the donor avatar mouse-over text feature in GazellePW GazellePosterWall commit 86c4bedf727691b5a97af42a4864869d18446449 allows remote authenticated users to inject arbitrary JavaScript via the avatarmouseovertext parameter, which is stored and later rendered in avata...
5.5AI score0.00359EPSS
SaveExploits0References5
CVE-2026-38465: Improper Neutralization of Input During Web Page Generation
A Stored XSS vulnerability in the donor avatar mouse-over text feature in GazellePW GazellePosterWall commit 86c4bedf727691b5a97af42a4864869d18446449 allows remote authenticated users to inject arbitrary JavaScript via the avatarmouseovertext parameter, which is stored and later rendered in avata...
5.4CVSS6AI score0.00359EPSS
SaveExploits0References2
20