CVE-2026-4186

A vulnerability was determined in UEditor up to 1.4.3.2. This issue affects some unknown processing of the file php/controller.php?action=uploadimage of the component JSONP Callback Handler. This manipulation of the argument callback causes cross site scripting. The attack can be initiated...

EUVD-2019-18966

Malware in sbrugna...

CVE-2019-9595

AppCMS 2.0.101 allows XSS via the upload/callback.php params parameter...