CVE-2026-116797

A flaw was found in Highcharts Grid Pro. Cross-Site Scripting XSS can occur when an attacker who controls table column configurations injects malicious event-handler attributes into rendered input elements. When a user interacts with or edits an affected cell, the injected script executes in thei...

Improper Access Control

mantisbt/mantisbt is vulnerable to improper access control. The vulnerability is due to insufficient access-level checks, which allows an attacker to exploit the Copy From functionality to retrieve column configurations from private projects without authorization...