CVE-2026-42506

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...

Phorum 5.0.14 - Multiple Subject and Attachment HTML Injection Vulnerabilities

Phorum 5.0.14 - Multiple Subject and Attachment HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/12800/info Phorum is reportedly affected by multiple HTML injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied inp...