CVE-2026-112042

A cross-site scripting (XSS) vulnerability exists in the diem-project diem software within the dmWidget component. The flaw is located in the dmBaseLinkTag::text function of the file dmCorePlugin/lib/view/html/link/dmBaseLinkTag.php. By manipulating the text argument, an attacker can trigger the ...

EUVD-2026-104048

A security flaw has been discovered in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. This issue affects the function dmBaseLinkTag::text of the file dmCorePlugin/lib/view/html/link/dmBaseLinkTag.php of the component dmWidget. Performing a manipulation of the argument text...