EUVD-2026-22049

Pachno 1.0.6 contains an XML external entity injection vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting unsafe XML parsing in the TextParser helper. Attackers can inject malicious XML entities through wiki table syntax and inline tags in issue descriptions...

Blue River Mura CMS Arbitrary Code Execution Vulnerability

Mura CMS is a CFML open source content management system created by Blue River Interactive Group. An arbitrary code execution vulnerability exists in Blue River Mura CMS prior to v7.0.7029. The vulnerability arises because Blue River Mura CMS supports inline function calls using m tags and /m end...