CVE-2026-71881

The GBIF Integrated Publishing Toolkit versions prior to 3.3.5 are affected by multiple injection issues in resource metadata fields . These vulnerabilities allow authenticated remote attackers to perform stored cross-site scripting (XSS) , which can lead to code execution in another user's sessi...