1433063 matches found
MINI-XVFM-PWG5-F76R
Bulletin has no description...
MINI-8CF6-7CCP-C464
Bulletin has no description...
MINI-VJ2G-JHX6-4X43
Bulletin has no description...
MINI-7VHJ-HXF2-GF7H
Bulletin has no description...
MINI-GXMM-JFCG-V9QV
Bulletin has no description...
MINI-2FHP-4RGX-F432
Bulletin has no description...
MINI-3WR5-J78M-CR4V
Bulletin has no description...
MINI-8HFV-9RX9-GXCM
Bulletin has no description...
MINI-GW27-FHH4-35WG
Bulletin has no description...
MINI-CJW5-527F-VWVR
Bulletin has no description...
MINI-6XGC-HC97-GGFW
Bulletin has no description...
MINI-MQ76-V38X-P7Q4
Bulletin has no description...
MINI-9HXC-R5W9-JR2J
Bulletin has no description...
MINI-5G3C-G3GH-G2MR
Bulletin has no description...
MINI-2754-HP7X-GHG8
Bulletin has no description...
CVE-2026-64851 Grav Shortcode Core Plugin: Stored XSS in shortcode-core attribute handlers
Grav Shortcode Core Plugin allows for the development shortcode plugins that utilize the common format utilized by WordPress and BBCode. Prior to 6.2.2, Grav Shortcode Core passes shortcode syntax through Security::detectXss because it contains no literal less-than character, then...
CVE-2026-64851
In Grav Shortcode Core Plugin before 6.2.2, ColorShortcode.php and related attribute handlers concatenate attacker-controlled parameters into HTML without encoding, bypassing Security::detectXss() (which misses payloads without a literal
EUVD-2026-62548
Grav Shortcode Core Plugin allows for the development shortcode plugins that utilize the common format utilized by WordPress and BBCode. Prior to 6.2.2, Grav Shortcode Core passes shortcode syntax through Security::detectXss because it contains no literal less-than character, then...