CVE-2026-120348

A vulnerability was identified in dayrui XunRuiCMS up to 4.7.4. Affected by this vulnerability is the function gettplcontent of the file dayrui/Fcms/Library/Notice.php of the component Email Template Rendering. The manipulation leads to code injection. The attack can be initiated remotely. The...

CVE-2026-120348

A code injection vulnerability exists in dayrui XunRuiCMS versions up to 4.7.4 . The flaw is located within the _get_tpl_content function of the file dayrui/Fcms/Library/Notice.php inside the Email Template Rendering component. This vulnerability allows for remote code injection , and an exploit ...

CVE-2026-120348 dayrui XunRuiCMS Email Template Rendering Notice.php _get_tpl_content code injection

A vulnerability was identified in dayrui XunRuiCMS up to 4.7.4. Affected by this vulnerability is the function gettplcontent of the file dayrui/Fcms/Library/Notice.php of the component Email Template Rendering. The manipulation leads to code injection. The attack can be initiated remotely. The...

EUVD-2026-115070

A vulnerability was identified in dayrui XunRuiCMS up to 4.7.4. Affected by this vulnerability is the function gettplcontent of the file dayrui/Fcms/Library/Notice.php of the component Email Template Rendering. The manipulation leads to code injection. The attack can be initiated remotely. The...

CVE-2026-120348: dayrui XunRuiCMS: A vulnerability was identified in dayrui XunRuiCMS up to 4.7.4

A vulnerability was identified in dayrui XunRuiCMS up to 4.7.4. Affected by this vulnerability is the function gettplcontent of the file dayrui/Fcms/Library/Notice.php of the component Email Template Rendering. The manipulation leads to code injection. The attack can be initiated remotely. The...

PT-2026-135336

A vulnerability was identified in dayrui XunRuiCMS up to 4.7.4. Affected by this vulnerability is the function get tpl content of the file dayrui/Fcms/Library/Notice.php of the component Email Template Rendering. The manipulation leads to code injection. The attack can be initiated remotely. The...

stylesmuggler

StyleSmuggler HTTP PoC Private research repository for the HTTP-only reproduction of StyleSmuggler, CVE-2026-75650, against a local Magento Open Source lab. Read the full technical walkthrough in Magento StyleSmuggler RCE: Report Poisoning to Code Execution. The Python PoC performs the complete...

CVE-2026-77460

EspoCRM is an open source customer relationship management application. Prior to 10.0.3, a user with email-template edit access and mass-email sending access can reference restricted record fields in a template because the renderer stops filtering those fields when per-user ACL application is...

CVE-2026-55184

EspoCRM is an open source customer relationship management application. Prior to 9.3.9, a user with Email Template or PDF Template edit permission can store crafted HTML that bypasses moderateSanitizeHtml. When another user opens the template in edit mode and clientCspDisabled is true, the stored...

CVE-2026-77460 EspoCRM: Mass email template renderer leaks restricted record fields

EspoCRM is an open source customer relationship management application. Prior to 10.0.3, a user with email-template edit access and mass-email sending access can reference restricted record fields in a template because the renderer stops filtering those fields when per-user ACL application is...

CVE-2026-77460 EspoCRM: Mass email template renderer leaks restricted record fields

EspoCRM is an open source customer relationship management application. Prior to 10.0.3, a user with email-template edit access and mass-email sending access can reference restricted record fields in a template because the renderer stops filtering those fields when per-user ACL application is...

CVE-2026-77460 EspoCRM: Mass email template renderer leaks restricted record fields

EspoCRM is an open source customer relationship management application. Prior to 10.0.3, a user with email-template edit access and mass-email sending access can reference restricted record fields in a template because the renderer stops filtering those fields when per-user ACL application is...

CVE-2026-77460

EspoCRM is an open source customer relationship management application. Prior to 10.0.3, a user with email-template edit access and mass-email sending access can reference restricted record fields in a template because the renderer stops filtering those fields when per-user ACL application is...

CVE-2026-77460

In EspoCRM versions prior to 10.0.3 , the mass email template renderer fails to filter restricted record fields when per-user ACL application is disabled. This allows a user with email-template edit and mass-email sending access to reference and disclose restricted user fields in rendered message...

EUVD-2026-102110

EspoCRM is an open source customer relationship management application. Prior to 10.0.3, a user with email-template edit access and mass-email sending access can reference restricted record fields in a template because the renderer stops filtering those fields when per-user ACL application is...

CVE-2026-55184

EspoCRM is an open source customer relationship management application. Prior to 9.3.9, a user with Email Template or PDF Template edit permission can store crafted HTML that bypasses moderateSanitizeHtml. When another user opens the template in edit mode and clientCspDisabled is true, the stored...

EUVD-2026-102104

EspoCRM is an open source customer relationship management application. Prior to 9.3.9, a user with Email Template or PDF Template edit permission can store crafted HTML that bypasses moderateSanitizeHtml. When another user opens the template in edit mode and clientCspDisabled is true, the stored...

CVE-2026-103304 eaSYNC < 1.3.31 - Unauthenticated Cancellation Request Creation and Email Template Update

The eaSYNC Booking WordPress plugin before 1.3.31 does not perform authorization or nonce checks on several of its cancellation-related AJAX actions, allowing unauthenticated users to create booking cancellation requests, trigger booking notification emails, and overwrite the content of the email...

CVE-2026-103304 eaSYNC < 1.3.31 - Unauthenticated Cancellation Request Creation and Email Template Update

The eaSYNC Booking WordPress plugin before 1.3.31 does not perform authorization or nonce checks on several of its cancellation-related AJAX actions, allowing unauthenticated users to create booking cancellation requests, trigger booking notification emails, and overwrite the content of the email...

CVE-2026-103304

The eaSYNC Booking WordPress plugin, in versions before 1.3.31 , is vulnerable to an authorization and nonce check deficiency. The flaw resides in several cancellation-related AJAX actions , which allows unauthenticated users to create booking cancellation requests, trigger booking notification e...