CVE-2026-126814

blueprintUE Self-Hosted Edition versions before 4.3.6 are vulnerable to an iframe injection vulnerability. The root cause lies in the PeerTube video URL matcher within the BlueprintService::findVideoProvider() function. An authenticated user can provide a video URL pointing to an attacker-control...

EUVD-2026-124029

blueprintUE Self-Hosted Edition before 4.3.6 contains an iframe injection vulnerability that allows authenticated users to embed arbitrary third-party content by abusing the PeerTube video URL matcher in BlueprintService::findVideoProvider. Attackers can set a blueprint video URL on an...

CVE-2018-25064

A vulnerability was found in OSM Lab show-me-the-way. It has been rated as problematic. This issue affects some unknown processing of the file js/site.js. The manipulation leads to cross site scripting. The attack may be initiated remotely. The patch is named...

CVE-2018-25064: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in OSM Lab show-me-the-way. It has been rated as problematic. This issue affects some unknown processing of the file js/site.js. The manipulation leads to cross site scripting. The attack may be initiated remotely. The patch is named...

“show-me-the-way” cross-site scripting vulnerability

show-me-the-way is an open source library from OSM Lab. It is used to view OSM edits made in real time. A cross-site scripting vulnerability exists in OSM Lab show-me-the-way, which stems from some unknown handling of the file js/site.js being problematic and can lead to cross-site scripting...