Path traversal in the All-in-One WP Migration and Backup WordPress plugin (versions 7.87 through 7.105) allows unauthenticated network attackers to create or append log files at arbitrary filesystem locations outside the plugin's intended storage directory. A publicly available proof-of-concept exploit exists via WPScan and the SSVC framework classifies exploitation as automatable, though EPSS at 0.16% (6th percentile) indicates limited observed opportunistic activity and no CISA KEV listing confirms active exploitation at time of analysis. The constrained write capability - log file creation and appending only, not arbitrary content injection - limits direct impact, but filesystem write access outside the web root could serve as a precursor step in chained attacks depending on server permissions.
PayPlus Payment Gateway WordPress plugin before 8.2.2 exposes an unauthenticated AJAX action that performs no authorization or order-ownership validation, allowing any remote, unauthenticated attacker to retrieve the secret order key of arbitrary WooCommerce orders. Under certain plugin configurations, the same endpoint additionally permits modification of order statuses, extending impact to data integrity. A publicly available proof-of-concept exists per WPScan reporting, though EPSS sits at only 0.13% (3rd percentile), indicating limited observed exploitation despite the SSVC Automatable=yes classification - no public exploit identified at time of analysis beyond the POC, and this CVE is not currently listed in CISA KEV.
Server-side request forgery in LimeSurvey through versions 6.17.10 and 7.0.4 exposes internal network infrastructure and cloud instance metadata to authenticated attackers via the REST API survey template endpoint. The vulnerability stems from unsanitized use of the HTTP Host header inside the getTemplateData() function, enabling the application server to be weaponized as a proxy to reach internal services and cloud metadata APIs such as AWS IMDSv1 at 169.254.169.254, potentially yielding IAM role credentials. A public proof-of-concept exploit is available via GitHub, raising the urgency of remediation despite the absence of a CISA KEV listing; no public exploit identified at time of analysis for active in-the-wild campaigns, but POC lowers the bar significantly for opportunistic exploitation.
Unrestricted file upload in Metasoft (美特软件) MetaCRM up to 6.4.0 Beta06 exposes a network-accessible, unauthenticated upload endpoint at /business/qnaire/upload.jsp that accepts arbitrary file types via the File argument, enabling potential web shell deployment on the underlying Java application server. Publicly available exploit code exists (E:P per CVSS 4.0 supplemental metric), and the vendor did not respond to responsible disclosure, leaving no official patch or advisory. No KEV listing exists, but the combination of zero-authentication requirement, public POC, and no vendor patch elevates real-world risk beyond the conservative CVSS 4.0 impact metrics suggest.
Unrestricted file upload in D-Link DNS-320 NAS firmware 1.0.2 exposes the `/web/web_file/upload.php` endpoint to unauthenticated remote attackers who can upload arbitrary file types - including PHP webshells - enabling effective remote code execution on the device. The CVSS 4.0 base vector confirms no authentication, user interaction, or special attack conditions are required (PR:N/UI:N/AC:L). A public exploit has been disclosed (CVSS 4.0 E:P modifier, corroborated by a referenced Feishu exploit document), and the DNS-320 is an end-of-life device for which no vendor patch has been identified, leaving exposed deployments persistently vulnerable.
SQL injection in Beijing Shenzhou Shihan Technology Multimedia Integrated Business Display System 8.2.2 allows remote attackers to manipulate backend database queries via the Structure_ID parameter in an admin-facing JSP endpoint. The CVSS 4.0 vector (PR:N/UI:N) indicates no authentication or user interaction is required, though the /admin/ path prefix creates meaningful uncertainty about whether access controls exist that were not reflected in the scoring. A public POC has been released and linked from the VulDB submission, lowering the bar for exploitation. No vendor-issued patch has been identified at time of analysis.
ThumbPress WordPress plugin (all versions before 6.2.2) allows any authenticated subscriber-level user to deactivate the plugin by exploiting a missing capability check on an AJAX action endpoint. This disrupts the site's image-handling functionality, constituting a targeted availability and integrity attack against WordPress installations. A publicly available exploit exists per WPScan; the vulnerability is not listed in CISA KEV, so active widespread exploitation is not confirmed at time of analysis.
Cross-site request forgery in the MailerSend WordPress plugin before 1.0.8 enables an unauthenticated remote attacker to wipe the plugin's SMTP configuration and deactivate it entirely by tricking a logged-in administrator into visiting a crafted page. The plugin's configuration-delete action validates the manage_options capability but entirely omits WordPress nonce verification, making administrator sessions exploitable via social engineering. A publicly available exploit demonstrates the attack; successful exploitation silently breaks all outbound email from the affected WordPress site, impacting password resets, order notifications, and transactional messaging.
Unauthenticated comment manipulation in the Kirki WordPress plugin (versions before 6.0.12) allows remote attackers to overwrite the content of any existing comment or inject new pre-approved comments under a spoofed identity, bypassing moderation entirely. The root cause is a missing authorization check (CWE-862) on a REST API route exposed by the plugin by default. A publicly available proof-of-concept exploit exists per WPScan, and SSVC classifies the attack as automatable, increasing the likelihood of mass exploitation against unpatched sites. No CISA KEV listing is present, but the trivial attack path warrants prompt patching.
Missing authorization on the booking cancellation endpoint in the WP Travel WordPress plugin (all versions before 11.7.1) permits any unauthenticated internet visitor to cancel arbitrary bookings on affected sites. The action is exposed without capability checks or ownership verification, meaning no login or elevated role is required. A public proof-of-concept is available via WPScan; no confirmed active exploitation in CISA KEV at time of analysis, though the trivial attack complexity makes opportunistic abuse realistic.
PayPlus Payment Gateway WordPress plugin before 8.2.2 exposes an unauthenticated AJAX action that performs no authorization or order-ownership validation, enabling any remote unauthenticated actor to tamper with payment-related metadata on arbitrary WooCommerce orders across the site. A publicly available proof-of-concept exploit exists, and the SSVC framework classifies this as automatable with partial technical impact, making scripted mass-scanning of vulnerable WooCommerce shops feasible. No active exploitation is confirmed in CISA KEV, and the EPSS score of 0.13% (3rd percentile) suggests opportunistic rather than widespread exploitation at time of analysis.
Information disclosure in Elementor Website Builder (all versions before 4.1.4) allows authenticated WordPress users with Contributor-level access or above to read the title, body, and metadata of private posts, private pages, and drafts belonging to other users - including site administrators - via an improperly permission-checked REST endpoint. A publicly available proof-of-concept exploit exists (reported by WPScan), though EPSS places exploitation probability at 0.14% (4th percentile), indicating limited current in-the-wild activity despite public PoC. No active exploitation has been confirmed by CISA KEV; the vendor has released a patched version (4.1.4).
Shortcode injection in the Reviews Feed WordPress plugin before 2.6.5 allows unauthenticated network attackers to execute arbitrary WordPress shortcodes on any site page that renders the affected feed. The attack is indirect: an adversary plants a shortcode payload inside a review on a connected third-party review platform (e.g., a Google Business profile linked to the plugin); when the plugin ingests and renders that review through its dynamic block without neutralizing shortcode syntax, WordPress's native shortcode processor executes the embedded macro. A publicly available proof-of-concept exists per WPScan; no active exploitation has been confirmed in CISA KEV, though the public POC meaningfully elevates practical risk above what the moderate CVSS score of 4.8 suggests.
XML injection in @astrojs/rss (all versions from 1.0.0 through 4.0.18) allows an attacker who can supply content to the `source.title` or `enclosure.type` RSS feed item fields to break out of XML string templates and inject arbitrary XML elements into the generated feed. The root issue is that both fields are interpolated directly into raw XML strings before `fast-xml-parser` processes them, with no escaping applied, so XML metacharacters are treated as markup rather than text. A public proof-of-concept is confirmed in the GitHub Security Advisory; no CISA KEV listing is indicated, and EPSS data was not provided in the available intelligence.
HTML injection in the Kirki WordPress plugin before 6.0.12 allows unauthenticated attackers to embed arbitrary HTML into password-reset emails delivered to registered site users, enabling targeted phishing from a trusted site domain. The flaw affects all Kirki versions below 6.0.12 and requires no authentication to trigger, though successful exploitation depends on the target user interacting with the malicious email. A publicly available POC exists per WPScan; the vulnerability is not currently listed in CISA KEV, and the 0.10% EPSS score (1st percentile) indicates minimal observed automated exploitation.
Remote code execution affects safishamsi GRAPHIFY versions 0.3.2 through 0.4.29 via a DNS rebinding attack targeting its URL-fetching subsystem. The functions validate_url, safe_fetch, _build_opener, _fetch_html, and _download_binary are exploitable when a maliciously controlled hostname performs DNS rebinding to bypass the URL validation layer, allowing an attacker to pivot into internal network resources and ultimately achieve code execution. A public proof-of-concept repository exists; no KEV listing is present at time of analysis, though the PoC lowers the bar for exploitation.
Stored cross-site scripting in maalfer Pentestify before 1.1.0 allows an authenticated attacker to inject arbitrary JavaScript that executes in the browser of every user who views an affected report. The payload is stored in a finding's images array or a report's client_logo array and interpolated directly into HTML img src attributes by the client-side rendering functions renderPreview, renderEditor, and renderAuditData in js/app.js without HTML escaping. No public exploit has been identified and this vulnerability is not listed in CISA KEV; however, the stored nature means a single injection persists and fires for all future viewers of the affected report until the application is patched.
Denial of service in SurrealDB's SurrealML header parser allows an authenticated Owner-role user to crash the entire server process by uploading a malformed .surml file to the /ml/import endpoint. Non-numeric input-dimensions or other invalid header fields trigger unchecked Rust unwrap() calls, causing a process-aborting panic that denies service to all databases hosted on the affected instance simultaneously. No public exploit code has been identified at time of analysis; vendor-released patch is available in SurrealDB 3.2.0.
Unauthenticated namespace and database creation in SurrealDB before 3.1.0 exposes any network-reachable instance to unauthorized catalog manipulation. The RPC use method and SurrealQL executor's USE NS/USE DB handling silently creates namespaces and databases that don't yet exist without verifying whether the caller holds DEFINE NAMESPACE or DEFINE DATABASE authority, making a completely unauthenticated guest session sufficient to pollute or exhaust the catalog. No public exploit code has been identified at time of analysis, and the CVSS 4.0 score of 6.9 reflects limited impact - data within existing namespaces cannot be read or modified - but the storage exhaustion vector and the ability to resurrect deliberately dropped namespaces via stale tokens represent meaningful operational risk for multi-tenant or publicly exposed deployments.
Information disclosure in the Quix Page Builder Pro Joomla extension exposes raw exception data to unauthenticated remote attackers via AJAX handler responses. The affected component fails to sanitize or suppress server-side exception output before returning it to the client, potentially leaking internal application state, file paths, database structure, or configuration details depending on what triggers the exception. No public exploit or CISA KEV listing is identified at time of analysis, but the unauthenticated network-accessible attack vector lowers the barrier for reconnaissance abuse.
Pre-authentication memory amplification in SurrealDB before 3.1.0 allows unauthenticated network attackers to exhaust server memory by streaming oversized WebSocket frames to the /sql endpoint, which fails to enforce the operator-configured SURREAL_WEBSOCKET_MAX_MESSAGE_SIZE limit before buffering incoming bytes. The /sql WebSocket upgrade handler accepts anonymous connections and accumulates up to 16 MiB per frame and 64 MiB per reassembled message in per-connection read buffers - the full WebSocket library default - before the authentication check (check_anon) can reject the payload, meaning memory cost is incurred regardless of whether the caller holds any SurrealQL permissions. No public exploit has been identified at time of analysis, but the unauthenticated network-accessible attack surface requires no special prerequisites beyond network connectivity and sustained bandwidth.
Policy signing key bypass in ClearanceKit prior to 5.0.10 permits any root process on macOS to forge valid signatures over arbitrary policy database content, granting full control over ClearanceKit's per-process file-system access enforcement plane. The root cause is a silent ACL failure specific to the macOS legacy System Keychain: ECDSA key items persisted via SecItemAdd silently lose their kSecAttrAccess restriction, leaving the signing key unrestricted to any root caller. No public exploit has been identified and no CISA KEV listing exists, but the integrity impact extends beyond the vulnerable component to the entire policy enforcement layer ClearanceKit provides.
ClearanceKit's on-disk SQLite policy store on macOS is vulnerable to a replay attack that allows a high-privileged local attacker to substitute a previously-captured, legitimately-signed policy snapshot, causing the opfilter component to enforce outdated or permissive per-process file-access policies on the next boot. All releases prior to version 5.0.10 are affected, with exploitation gated to specific windows: the opfilter-update period when the Endpoint Security filter is offline, offline-boot scenarios, or decrypted-backup restoration. No public exploit code or CISA KEV listing exists at time of analysis, and EPSS data was not provided in available intelligence.
Denial of service in libvips 8.18.1 and earlier arises from the EXIF decoder's failure to validate Image File Directory (IFD) index values before passing them to libexif, enabling a crash via null pointer dereference when a crafted image with an out-of-range IFD tag group index is processed. All platforms running libvips through its EXIF parsing path are affected, including downstream consumers such as Node.js sharp and other language bindings that link against libvips. No public exploit has been identified and active exploitation is not confirmed, but the fix is publicly visible and the crash condition is straightforward to reproduce.
Integer overflow in libvips gifload on 32-bit platforms allows an attacker who can supply crafted GIF images to cause incorrect buffer sizing and crash the image-processing application. Affected are all libvips builds up to and including 8.18.0 compiled for 32-bit architectures, where multiplying GIF width by height as a native int can wrap past INT_MAX. No public exploit is identified at time of analysis; a vendor-released patch is available in libvips 8.18.1.
Directory traversal in FileThingie v.2.5.7 allows a remote, low-privileged attacker to read arbitrary files outside the application's intended directory boundary via a crafted HTTP request. The CVSS:3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) confirms network-accessible exploitation with high confidentiality impact and no write or availability consequences. No confirmed active exploitation (CISA KEV) is recorded, but a public vulnerability research repository referencing this CVE exists, suggesting proof-of-concept material may be available.
Stack-based buffer overflow in the rpcinfo client utility (part of the rpcbind package) crashes the client process when querying a malicious or compromised rpcbind server using the `-l` flag. Address data returned by the server is copied into a fixed-size stack buffer without bounds validation (CWE-121), enabling a server-side attacker to trigger a denial of service against any administrator or script that runs `rpcinfo -l` against their controlled endpoint. No public exploit identified at time of analysis, and no CISA KEV listing; impact is confined to client-side availability with no confidentiality or integrity exposure.
Out-of-bounds memory corruption in kronosnet's packet reassembly engine (versions ≤ 1.34) enables a remote, unauthenticated network attacker to crash the kronosnet process or cause heap corruption by transmitting malformed fragmented packets carrying invalid sequence numbers. Affected deployments span Red Hat Enterprise Linux 8, 9, and 10, and Red Hat OpenShift Container Platform 4, making this relevant to HA clustering infrastructure that depends on kronosnet for inter-node communication via Corosync or Pacemaker. No public exploit code and no active exploitation have been identified at time of analysis, though the network-accessible, no-privilege-required attack path elevates operational risk for clustered environments despite the AC:H complexity rating.
NULL pointer dereference in NanoMQ 0.24.11 and earlier allows an authenticated REST API user to crash the entire broker process with a single malformed HTTP request. The `properties_parse()` function fails to validate that `user_properties` is a JSON object before iterating its elements, calling `strlen()` on a NULL pointer and causing a fatal segmentation fault. No active exploitation has been confirmed and no public exploit code has been identified at time of analysis; a vendor patch is available in version 0.24.14.
Unauthenticated access to FreeScout's email open-tracking endpoint (`GET /thread/read/{conversation_id}/{thread_id}`) allows remote attackers to enumerate valid conversation and thread IDs and manipulate the `opened_at` timestamp on arbitrary threads. All FreeScout deployments prior to version 1.8.219 are affected. No active exploitation is confirmed (not in CISA KEV) and no public exploit code has been identified at time of analysis.
rsync client versions prior to 3.4.3 crash deterministically when connecting to a malicious sender due to an out-of-bounds array read in recv_files(). Any client performing a standard recursive pull - the default behavior since protocol version 30 - against an attacker-controlled rsync server or URL is exposed without any special victim-side configuration. Impact is strictly denial-of-service (client crash via SIGSEGV); remote code execution has been explicitly ruled out on glibc x86-64 Linux, though non-glibc allocators remain unaudited. No public exploit identified at time of analysis; vendor-released patch is available in version 3.4.3.
NanoMQ's MQTT v5 SUBSCRIBE packet parser fails to enforce the mandatory 1-byte Subscription Options field, enabling remote unauthenticated attackers to submit malformed SUBSCRIBE packets that the broker silently accepts and installs into internal subscription state. Under a precisely crafted packet-length condition, the same defect manifests as a 1-byte heap-buffer-overflow (CWE-125), confirmed by ASAN, which can crash the broker and disrupt all connected MQTT clients. All NanoMQ releases up to and including 0.24.14 are affected; no confirmed active exploitation (KEV) or public exploit code has been identified at time of analysis, though the unauthenticated network attack surface warrants prompt remediation in internet-exposed deployments.
Sandbox path containment bypass in Network-AI's AgentRuntime (npm package `network-ai` by jovancoding) allows any low-privileged agent or user with access to `AgentRuntime.readFile()` or `AgentRuntime.listDir()` to read or enumerate files outside the configured `basePath` sandbox by targeting sibling directories whose names share the sandbox's string prefix. Versions 5.12.1 and earlier are confirmed vulnerable (CPE: cpe:2.3:a:jovancoding:network-ai:*:*:*:*:*:*:*:*, EUVD-2026-46018). A working proof-of-concept is included in the GitHub security advisory GHSA-jvcm-f35g-w78p; no public exploit confirmed in active exploitation and the vulnerability is not listed in the CISA KEV catalog.
Stored cross-site scripting in HeyForm's unauthenticated file upload endpoint allows remote attackers to execute arbitrary JavaScript in victims' browsers by uploading SVG files containing embedded scripts. The `/api/upload` endpoint accepted SVG uploads without authentication, stored them in the static assets directory, and Express's serve-static served them with `Content-Type: image/svg+xml`, enabling script execution in the HeyForm domain context when a victim views the file URL. No active exploitation is confirmed (not in CISA KEV); vendor-released patch 3.0.0-rc.7 is available.
Stored Cross-Site Scripting in the Spectra Legacy - Gutenberg Blocks plugin for WordPress (all versions through 2.19.28) allows low-privileged authenticated attackers to plant persistent malicious scripts via the image block that execute in any visitor's browser. The vulnerability resides in insufficient sanitization and output escaping within the `uagb/image` block renderer, specifically traced by Wordfence to `class-uagb-image.php` and `block.php`. With Contributor-level access - a role available on virtually any multi-author or membership-enabled WordPress site - an attacker can inject payloads that persist until removed, affecting every subsequent visitor. No public exploit code or CISA KEV listing has been identified at time of analysis.
Unauthenticated triggering of all configured scheduled jobs in Grav CMS's scheduler-webhook plugin is possible due to a null short-circuit logic flaw in webhook token validation, allowing any network-reachable attacker to execute operator-defined commands under the web server process account via a single POST request. The affected component is the scheduler-webhook plugin for Grav CMS, a PHP flat-file CMS; the CVSS 4.0 vector (AC:H/AT:P) confirms exploitation requires the plugin to be installed with configured jobs and an exposed endpoint - not a default Grav deployment. No active exploitation has been confirmed (not in CISA KEV) and no public exploit code has been identified at time of analysis.
Server-side request forgery in HyperDX before 2.31.0 allows authenticated team members to redirect the application server to arbitrary internal network destinations by supplying a caller-controlled host parameter to the ClickHouse proxy test endpoint, which performed no URL validation, protocol restriction, or private IP blocklist enforcement. The endpoint further reflected raw error response bodies back to the caller, enabling exfiltration of responses from internal APIs, container services, and cloud provider instance metadata endpoints such as AWS IMDSv1. No public exploit code has been identified and the vulnerability is not in CISA KEV, but the CVSS 4.0 vector assigns High confidentiality impact to subsequent systems (SC:H), reflecting serious internal infrastructure exposure potential for cloud-hosted deployments.
Server-side request forgery in Huginn through 2022.08.18 allows any authenticated user to weaponize the ScenarioImport fetch_url method to issue arbitrary outbound HTTP requests from the server. An attacker with low-privilege access can probe internal network topology, enumerate ports via timing and error signatures, and - critically - reach cloud Instance Metadata Service (IMDS) endpoints such as AWS 169.254.169.254 to harvest IAM credentials. No public exploit code or CISA KEV listing has been identified at time of analysis, but the upstream fix (PR #3684) and disclosure by VulnCheck confirm the vulnerability.
Windu CMS 4.1 stores user passwords using MD5 and SHA1 with a static salt, providing negligible resistance against offline cracking once password hashes are obtained. An attacker who acquires the credential database - through SQL injection, a backup exposure, or any secondary breach - can recover plaintext passwords rapidly using precomputed rainbow tables or GPU-accelerated cracking tools. No active exploitation has been confirmed (no CISA KEV listing, no public proof-of-concept), though the weakness is structurally severe: static salts eliminate the primary defense against precomputation attacks and MD5/SHA1 are high-throughput algorithms entirely unsuited to password storage.
Incorrect authorization in Vercel's @ai-sdk/harness-codex package (prior to 1.0.29) allows untrusted code executing inside a Codex CLI sandbox to invoke arbitrary host-exposed tools - including secret lookups, deployment operations, and cloud API calls - without a corresponding model-authorized tool-call event. The relay server validates incoming requests solely by checking whether the requesting process's command line contains the Codex CLI shim path via Linux /proc, a condition any sandbox process can trivially forge by including the shim path in its own argv. No public exploit has been identified and the vulnerability is not listed in CISA KEV, but the supply-chain threat vector via malicious npm lifecycle hooks or build scripts is realistic for developer environments processing untrusted repositories.
Sandbox authorization bypass in Vercel's `@ai-sdk/harness-opencode` (all versions prior to 1.0.28) permits untrusted code executing inside the OpenCode sandbox to invoke arbitrary host-exposed tools — including secret lookups, deployment operations, and cloud API calls — without a corresponding model-authorized tool-call event. The flawed process-path fallback reads `/proc/<pid>/cmdline` on Linux to verify the requesting process's command line contains the `host-tool-mcp.mjs` script path, a check that sandboxed attacker-controlled code can satisfy or spoof. No public exploit code has been identified at time of analysis, and the issue is remediated in v1.0.28 by replacing the path check with short-lived one-time authorization tokens bound to bridge-observed model events.
Rsync daemon versions prior to 3.4.3 expose a symlink race condition (TOCTOU) in path-based system calls - specifically chmod() and chown() - that prior security patches overlooked when fixing analogous races in open(). When deployed with 'use chroot = no', an attacker with local filesystem write access to an exported module directory can redirect these calls through a symlink to files outside the module boundary, altering permissions, ownership, or timestamps on otherwise inaccessible files. No public exploit has been identified at time of analysis, and the issue is addressed in rsync 3.4.3.
Reflected Cross-Site Scripting in Best Practical RT versions 5.0.4-5.0.9 and 6.0.0-6.0.2 allows an unauthenticated attacker to execute arbitrary JavaScript in the browser session of an authenticated RT user by inducing that user to visit a specially crafted URL. The CVSS vector's Changed scope (S:C) indicates the injected script can impact browser security context beyond the vulnerable RT component itself, including potential session hijacking or in-browser data exfiltration. Vendor-released patches are confirmed in versions 5.0.10 and 6.0.3 (released 2026-05-20); no active exploitation has been identified at time of analysis.
Reflected DOM XSS in dataCycle-CORE versions up to and including 25.07.3 allows unauthenticated remote attackers to inject arbitrary HTML into flash notification toast components via crafted links to public routes such as `/docs`. The frontend toast component renders attacker-supplied content directly via `innerHTML` without sanitization, enabling script execution in the victim's browser across the normal application layout - not limited to isolated or admin-only views. No active exploitation or public exploit code has been identified at time of analysis, though the unauthenticated, low-complexity network vector substantially lowers the bar for opportunistic abuse.
Cross-site scripting in fuint Member Marketing System v1.0 and earlier allows remote unauthenticated attackers to inject malicious JavaScript through the ClientMessageController component, executing within authenticated users' browser sessions when they view the compromised content. The CVSS 6.1 vector (AV:N/AC:L/PR:N/UI:R/S:C) confirms network-accessible, low-complexity injection requiring no authentication, with scope change indicating browser-context impact beyond the originating request. No public exploit has been confirmed at time of analysis, and this CVE is not listed in the CISA KEV catalog.
Stored cross-site scripting in Mettle SendPortal 3.0.1 and earlier enables persistent JavaScript injection through the content parameter of the /templates endpoint, with payloads executing in every browser that subsequently renders the poisoned template. A public proof-of-concept is hosted on GitHub Gist, providing low-effort reproduction for threat actors. Despite CISA SSVC assessing current exploitation as none, the scoped impact (S:C) means a single injected template can cascade across all users who view it, making this a meaningful session-hijacking or credential-harvesting vector for organizations relying on SendPortal for email campaign management.
Reflected Cross-Site Scripting in RT (Request Tracker) 6.0.0 through 6.0.2 allows an unauthenticated network attacker to execute arbitrary JavaScript in an authenticated user's browser session by inducing that user to visit a crafted URL. The CVSS:3.1 scope-change flag (S:C) confirms the payload crosses from the RT application context into the victim's browser, enabling session token theft or unauthorized RT actions on behalf of the victim. No public exploit code or CISA KEV listing has been identified at time of analysis; the vendor-released fix is RT 6.0.3, published 2026-05-20.
Reflected cross-site scripting in a WSO2 product allows unauthenticated remote attackers to inject arbitrary JavaScript into victim browsers by crafting a malicious URL containing an unsanitized parameter. When a victim user clicks the attacker-controlled link, the injected script executes in the victim's browser under the application's origin, enabling UI manipulation, phishing redirects, and extraction of non-cookie browser data. Session hijacking impact is partially mitigated because session cookies are protected by the httpOnly flag, though other sensitive browser-accessible data remains at risk. No public exploit or KEV listing has been identified at time of analysis.
Open redirect in Hikashop, the Joomla e-commerce extension, affects all versions from 1.0.0 through 6.5.1 and allows remote unauthenticated attackers to craft legitimate-looking store URLs that silently forward victims to arbitrary external destinations. Exploitation requires victim interaction (a clicked link), making this a phishing and credential-harvesting enabler rather than a direct infrastructure threat. No public exploit code has been identified at time of analysis, and EPSS places exploitation probability at just 0.13% (3rd percentile), consistent with SSVC's classification of exploitation status as none.
Path traversal in Network-AI's EnvironmentManager.restore() allows a local authenticated caller to copy arbitrary directories from outside the designated backups directory into any environment data directory. All versions prior to 5.12.2 (confirmed in 5.12.1) are affected, as the backupId parameter is concatenated with path.join() without containment checks, and the restore path is reachable by default through the bundled CLI. A working proof-of-concept is publicly documented in the GHSA advisory; no CISA KEV listing was identified at time of analysis.