Xss

4 posts tagged with “Xss”

BREAKING: WordPress comment XSS lets strangers plant script (7.1.1)
cvewordpressxss

BREAKING: WordPress comment XSS lets strangers plant script (7.1.1)

How to fix CVE-2026-93485: upgrade WordPress to 7.1.1

Sep 18, 2026
Read
CVE-2026-77774: Magento still needs APSB26-138 after the StyleSmuggler hotfix
cveadobe-commercemagento

CVE-2026-77774: Magento still needs APSB26-138 after the StyleSmuggler hotfix

How to fix CVE-2026-77774: apply Adobe APSB26-138 September Isolated patches (or *-2026-sep builds) after the StyleSmuggler hotfix, then verify with php vendor/bin/patch-status

Sep 8, 2026
Read
BREAKING: CVE-2026-73043 - SiYuan Template Calculation RCE in Desktop Client
cvesecurityvulnerability

BREAKING: CVE-2026-73043 - SiYuan Template Calculation RCE in Desktop Client

CVE-2026-73043 is a critical SiYuan flaw where unsanitized database Template calculation output reaches Electron innerHTML and can become OS command execution. Upgrade to 3.7.4 or later.

Aug 16, 2026
Read
CVE-2026-9318: tablib Stored XSS via HTML Export Dataset Title
cvesecurityvulnerability

CVE-2026-9318: tablib Stored XSS via HTML Export Dataset Title

tablib, a Python tabular data library with over 147 million PyPI downloads, contains a stored cross-site scripting vulnerability in its HTML export functionality. Attackers can embed JavaScript payloads in dataset titles that execute when the exported HTML file is opened in a browser. Fixed in version 3.10.0.

Aug 12, 2026
Read