CVE-2026-13666

An improper neutralization of CRLF sequences 'CRLF Injection' vulnerability in Sharing API in Synology DiskStation Manager DSM before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075 allows remote authenticated users to write limited files when a victim clicks a sharing URL...

CVE-2023-52264

The beesblog aka Bees Blog component before 1.6.2 for thirty bees allows Reflected XSS because controllers/front/post.php sharingurl is mishandled...

PT-2023-31947

Name of the Vulnerable Software and Affected Versions The beesblog aka Bees Blog component for thirty bees version 1.6.2 and earlier Description The issue allows Reflected XSS because the sharing url in controllers/front/post.php is mishandled. This can lead to malicious scripts being injected in...