Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
•added 2026/06/05 7:22 p.m.•20 views

CVE-2026-43892

AntSword is a cross-platform website management toolkit. Prior to 2.1.16, incomplete noxss sanitization leads to 1-click RCE via jquery.terminal format code injection. This vulnerability is fixed in 2.1.16...

8.8CVSS5.5AI score0.0045EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/05/12 5:43 p.m.•12 views

CVE-2026-43892 AntSword: Incomplete noxss() sanitization leads to 1-click RCE via jquery.terminal format code injection

AntSword is a cross-platform website management toolkit. Prior to 2.1.16, incomplete noxss sanitization leads to 1-click RCE via jquery.terminal format code injection. This vulnerability is fixed in 2.1.16...

8.8CVSS5.9AI score0.0045EPSS
SaveExploits0References1
CVE
CVE
•added 2026/05/12 5:43 p.m.•36 views

CVE-2026-43892

AntSword (cross-platform website management toolkit) is affected by CVE-2026-43892 due to incomplete noxss() sanitization before version 2.1.16, enabling a 1-click remote code execution through jquery.terminal format code injection. The vulnerability is fixed in version 2.1.16. Impact is describe...

8.8CVSS5.9AI score0.0045EPSS
SaveExploits0References1
OSV
OSV
•added 2026/05/12 5:43 p.m.•12 views

CVE-2026-43892 AntSword: Incomplete noxss() sanitization leads to 1-click RCE via jquery.terminal format code injection

AntSword is a cross-platform website management toolkit. Prior to 2.1.16, incomplete noxss sanitization leads to 1-click RCE via jquery.terminal format code injection. This vulnerability is fixed in 2.1.16...

8.8CVSS6AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/05/12 12:00 a.m.•39 views

PT-2026-40329

AntSword is a cross-platform website management toolkit. Prior to 2.1.16, incomplete noxss sanitization leads to 1-click RCE via jquery.terminal format code injection. This vulnerability is fixed in 2.1.16...

8.8CVSS5.9AI score0.0045EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/12 12:00 a.m.•0 views

CVE-2026-43892: Improper Neutralization of Input During Web Page Generation

AntSword is a cross-platform website management toolkit. Prior to 2.1.16, incomplete noxss sanitization leads to 1-click RCE via jquery.terminal format code injection. This vulnerability is fixed in 2.1.16...

8.8CVSS5.8AI score0.0045EPSS
SaveExploits0References4
Rows per page
Query Builder