CVE-2026-38936

A reflected cross-site scripting (XSS) vulnerability exists in diskover-community version 2.3.5 and earlier . The flaw is located in the public/selectindices.php file and is triggered via the namecontains parameter due to improper neutralization of input during web page generation. This vulnerabi...