CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

2 matches found

OSV•added 2026/09/11 11:15 a.m.•2 views

CVE-2026-89249 AVideo YPTWallet Stored XSS via CryptoWallet Configuration

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the YPTWallet plugin where user-supplied CryptoWallet values are base64-encoded but not HTML-escaped before storage in walletlog.information. Administrators viewing pending...

9.3CVSS5.8AI score

SaveExploits0References4

Rapid7 Vulnerability Database (full)•added 2026/09/11 12:00 a.m.•6 views

CVE-2026-89249: Improper Neutralization of Input During Web Page Generation

9.3CVSS5.8AI score0.00367EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by