CVE-2026-43887

Outline is a service that allows for collaborative documentation. From 0.84.0 to 1.6.1, the Outline comment section permits users to mention other users; however, the backend does not validate or sanitize the href attribute associated with these mentions. As a result, potentially dangerous...

Outline 跨站脚本漏洞

Outline is an open-source knowledge base developed by Outline. Versions 0.84.0 to 1.6.1 of Outline contain a cross-site scripting vulnerability. This vulnerability arises from the comment section, where users are allowed to mention others. However, the backend does not validate or clean up the hr...

ghtml Cross-Site Scripting Vulnerability

ghtml is a toolkit by the individual developer Gürgün Dayıoğlu. A cross-site scripting vulnerability exists in ghtml versions prior to 2.0.0, which stems from unprocessed attribute value encoding and lack of control over href values, and could lead to cross-site scripting...