CVE-2026-55090

Etherpad is a real-time collaborative editor. Prior to 3.3.0, getHTMLFromAtext in src/node/utils/ExportHtml.ts interpolates values from the exportHtmlAdditionalTagsWithData plugin hook into span data attributes without HTML attribute escaping. A pad editor can place an attacker-controlled value...

CVE-2026-55090

Etherpad (real-time collaborative editor) versions prior to 3.3.0 are vulnerable to stored cross-site scripting in the HTML export feature. The root cause is in getHTMLFromAtext in src/node/utils/ExportHtml.ts, which interpolates values from the exportHtmlAdditionalTagsWithData plugin hook into s...

EUVD-2026-62734

Etherpad is a real-time collaborative editor. Prior to 3.3.0, getHTMLFromAtext in src/node/utils/ExportHtml.ts interpolates values from the exportHtmlAdditionalTagsWithData plugin hook into span data attributes without HTML attribute escaping. A pad editor can place an attacker-controlled value...

CVE-2026-55090 Etherpad: Stored XSS in HTML export via unescaped attribute-pool values

Etherpad is a real-time collaborative editor. Prior to 3.3.0, getHTMLFromAtext in src/node/utils/ExportHtml.ts interpolates values from the exportHtmlAdditionalTagsWithData plugin hook into span data attributes without HTML attribute escaping. A pad editor can place an attacker-controlled value...

CVE-2026-55090 Etherpad: Stored XSS in HTML export via unescaped attribute-pool values

Etherpad is a real-time collaborative editor. Prior to 3.3.0, getHTMLFromAtext in src/node/utils/ExportHtml.ts interpolates values from the exportHtmlAdditionalTagsWithData plugin hook into span data attributes without HTML attribute escaping. A pad editor can place an attacker-controlled value...

CVE-2026-55090 Etherpad: Stored XSS in HTML export via unescaped attribute-pool values

Etherpad is a real-time collaborative editor. Prior to 3.3.0, getHTMLFromAtext in src/node/utils/ExportHtml.ts interpolates values from the exportHtmlAdditionalTagsWithData plugin hook into span data attributes without HTML attribute escaping. A pad editor can place an attacker-controlled value...

GHSA-2JP7-WWPG-3P9W Etherpad has stored XSS in HTML export via unescaped attribute-pool values

Fix: PR 7905 ether/etherpad. getHTMLFromAtext in src/node/utils/ExportHtml.ts interpolates values from the exportHtmlAdditionalTagsWithData plugin hook into span data-="" without HTML-attribute escaping. The value comes verbatim from the pad attribute pool, which a pad editor controls via a craft...

PT-2026-76895

Name of the Vulnerable Software and Affected Versions Etherpad versions prior to 3.3.0 Description Stored cross-site scripting occurs when the getHTMLFromAtext function in src/node/utils/ExportHtml.ts interpolates values from the exportHtmlAdditionalTagsWithData plugin hook into span data...

Exploit for Improper Input Validation in Apache Traffic_Server

CVE-2026-33267 — Apache Traffic Server untrusted @ header →...

Traq - Unauthenticated Plugin Hook RCE

Exploits Traq by installing an unauthenticated plugin hook that executes attacker PHP, then cleans up the plugin. !/usr/bin/env python3 -- coding: utf-8 -- """Traq unauthenticated plugin hook RCE.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from...

Cacti api_pluginhook() Code Execution

The vulnerability of the apipluginhook function in the lib/plugin.php file of the Cacti network monitoring software is related to authentication errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2024-3769

Name of the Vulnerable Software and Affected Versions Cacti versions prior to 1.2.27 Description Cacti provides an operational monitoring and fault management framework. There is a file inclusion issue in the lib/plugin.php file, specifically with the api plugin hook function, which reads the...

Fedora 22 : roundcubemail-1.1.2-1.fc22 (2015-11405)

Release 1.1.2 - Add new plugin hook 'identitycreateafter' providing the ID of the inserted identity 1490358 - Add option to place signature at bottom of the quoted text even in top-posting mode sigbelow - Fix handling of %-encoded entities in mailto: URLs 1490346 - Fix zipped messages downloads...