PT-2026-67472

Impact The Trix editor, in versions prior to 2.1.18, is vulnerable to XSS when crafted HTML is pasted into the editor. The HTMLParser processed a mock attachment, a carrying an empty data-trix-attachment="". The empty attachment object caused the element to bypass attachment handling, so its...

CVE-2026-15333: Improper Neutralization of Input During Web Page Generation

The Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 600+ Patterns, 58 Blocks & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'cozyCustomFont' Block Attribute in all versions up to, and including, 2.2.11 due to insufficient input sanitization and output...

Trix: Stored XSS via HTMLParser attribute injection on paste

The Trix editor, in versions prior to 2.1.18, is vulnerable to XSS when crafted HTML is pasted into the editor. The HTMLParser processed a mock attachment, a carrying an empty data-trix-attachment="". The empty attachment object caused the element to bypass attachment handling, so its...

CVE-2026-15334: Improper Neutralization of Input During Web Page Generation

The Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 600+ Patterns, 58 Blocks & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'icon.view' Block Attribute in all versions up to, and including, 2.2.11 due to insufficient input sanitization and output...

PT-2026-71921

Name of the Vulnerable Software and Affected Versions Trix versions prior to 2.1.18 Description Trix is vulnerable to stored cross-site scripting when crafted HTML is pasted into the editor. The HTMLParser processes a mock attachment in a with an empty data-trix-attachment value, which causes...

ImageMagick DoS

The vulnerability of the console-based graphic editor ImageMagick is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow an attacker to cause a service failure...

ImageMagick Memory Leak DoS

The vulnerability of the console-based graphic editor ImageMagick is related to the lack of memory release after the effective lifespan of the software. Exploiting this vulnerability can allow an attacker to cause a service failure...

ImageMagick DoS

The vulnerability of the console-based graphic editor ImageMagick is related to incorrect calculations. Exploiting this vulnerability can allow an attacker to cause a service failure...

ImageMagick Pointer Manipulation DoS

The vulnerability of the console-based graphic editor ImageMagick is related to the use of pointers. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

ImageMagic CheckPrimitiveExtent Heap Buffer Overflow DoS

The vulnerability of the CheckPrimitiveExtent function in the console-based ImageMagick graphics editor relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

ImageMagick Unauthorized Access

The vulnerability of the console-based graphic editor ImageMagick is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

ImageMagick Decoder DoS

The vulnerability of the ICON console-based image editing tool ImageMagick relates to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

FoxitPDFReaderUpdater Update Privilege Escalation

The vulnerability of the FoxitPDFReaderUpdater.exe service, a tool for viewing electronic documents in PDF format within the Foxit PDF Reader formerly Foxit Reader and the Foxit PDF Editor formerly Foxit PhantomPDF, is related to an uncontrolled pathfinding mechanism. Exploiting this vulnerabilit...

CVE-2026-27064

Editor Arbitrary File Upload in Mailster = 4.1.17 versions...

CVE-2026-65757

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Modules Anywhere extension - The editor popup could expose restricted module data to authenticated users without the required module permissions or valid request tokens...

CVE-2026-65757 Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Modules Anywhere extension

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Modules Anywhere extension - The editor popup could expose restricted module data to authenticated users without the required module permissions or valid request tokens...

CVE-2026-65757

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Modules Anywhere extension - The editor popup could expose restricted module data to authenticated users without the required module permissions or valid request tokens...

EUVD-2026-47895

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Modules Anywhere extension - The editor popup could expose restricted module data to authenticated users without the required module permissions or valid request tokens...

EUVD-2026-47921

The Equalize Digital Accessibility Checker – WCAG, ADA, EAA and Section 508 compliance plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'html' parameter in all versions up to, and including, 1.46.0 due to insufficient input sanitization and output escaping. This makes it...

UBUNTU-CVE-2026-6390

A flaw was found in GNU nano's multi-buffer error message handling. When a user opens multiple files at startup and one triggers an ALERT-level error, a specially crafted filename containing printf format specifiers can be reinterpreted. This format string vulnerability may allow an attacker to...