CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

9 matches found

Mend•added 2026/08/26 6:06 p.m.•11 views

CVE-2026-63179

Winter CMS is a content management system built on the Laravel PHP framework. In versions up to and including 1.2.12, authenticated backend users can disclose arbitrary files readable by the PHP process by injecting @import inline directives into LESS source that the backend compiles, because the...

6.9CVSS5.8AI score0.00515EPSS

SaveExploits0References7

CVE•added 2026/06/30 2:30 a.m.•63 views

CVE-2026-12114

The CVE-2026-12114 entry concerns the WordPress plugin “Team Members – Multi Language Supported Team”. The vulnerability is a Stored Cross-Site Scripting flaw in admin settings present in all versions up to 8.7, caused by insufficient input sanitization and output escaping. It affects multisite i...

4.4CVSS6AI score0.00335EPSS

SaveExploits0References8

Vulnrichment•added 2026/06/30 2:30 a.m.•26 views

CVE-2026-12114 Team Members <= 8.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'custom_css' Parameter

The Team Members – Multi Language Supported Team Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 8.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wi...

4.4CVSS6AI score0.00335EPSS

SaveExploits0References8

Cvelist•added 2026/06/30 2:30 a.m.•60 views

CVE-2026-12114 Team Members <= 8.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'custom_css' Parameter

4.4CVSS0.00335EPSS

SaveExploits0References8