Insufficient audit logging in HCL IntelliOps Event Management (IEM) allows authenticated network users to probe privilege boundaries and conduct reconnaissance without generating detectable log entries. The CVSS vector (AV:N/AC:L/PR:L/UI:N) confirms any low-privileged authenticated user can exploit this over the network with no complexity barrier. No public exploit code or active exploitation has been identified; this is a vendor-self-reported issue with no EPSS data or KEV listing.
Cross-cluster MITM attacks are enabled in Red Hat Advanced Cluster Management for Kubernetes 2.x via the lighthouse service discovery component, which fails to validate IP addresses advertised in EndpointSlice objects. An attacker controlling a compromised spoke cluster can inject arbitrary IP addresses into EndpointSlices, causing lighthouse DNS resolution across all connected clusters to redirect legitimate cross-cluster service traffic to attacker-controlled endpoints. The CVSS Scope:Changed metric confirms that impact propagates beyond the compromised spoke cluster to the hub and peer clusters, enabling unauthorized interception and manipulation of inter-cluster communications. No public exploit code or CISA KEV listing has been identified at time of analysis.
Stored cross-site scripting in BigBlueButton's screenshare recording playback allows an authenticated low-privileged user to inject arbitrary script via a crafted meeting name, which executes in any other user's browser upon viewing the screenshare recording. Affected versions are all BigBlueButton releases prior to 3.0.29; the vulnerability is rooted in unescaped ERB interpolation of meetingName into both the page title and heading of index.html.erb. No public exploit or CISA KEV listing has been identified at time of analysis, though the publicly available commit diff could guide exploit development.
Authenticated IDOR in the Winter CMS backend FileUpload widget (versions through 1.2.12) allows any backend user - including those with no role beyond default My Account access - to manipulate attachment metadata and sort ordering across the entire application by submitting an attacker-controlled file_id POST parameter. Because the system_files table uses sequential integer primary keys, any authenticated attacker can enumerate and target arbitrary System\Models\File records belonging to unrelated users or models, overwriting title, description, and sort_order, and potentially triggering onRemoveAttachment against unrelated records through the same unscoped lookup. No public exploit has been identified at time of analysis, and no CISA KEV entry exists.
Stored XSS in Laravel Backpack CRUD's color column Blade template allows any authenticated user with write access to a color-typed field to inject arbitrary JavaScript that executes in the browsers of other users - including administrators - who view the affected list page. The root cause is an inversion of the escaped/unescaped rendering branches in `color.blade.php`: because `$column['escaped']` defaults to `true`, the template renders values raw via `{!! $column['text'] !!}` instead of HTML-escaped, the exact opposite of every other column template in the library. No public exploit has been identified at time of analysis, but the CVSS scope-change indicator (S:C) reflects real cross-user impact including potential session cookie and CSRF token theft from administrators.
Memory exhaustion in Mailpit's SMTP server (versions 1.30.0 through 1.30.4) allows unauthenticated remote SMTP clients to force heap allocation beyond the configured MaxMessageSize limit by transmitting a single DATA line exceeding the cap - because `bufio.Reader.ReadBytes('\n')` buffers the entire line into memory before the size check is applied. This is a post-fix incomplete remediation of an earlier SMTP body-size advisory: multi-line DATA accumulation was bounded, but single-line pre-read was not, leaving a residual gap in versions 1.30.0-1.30.4. A proof-of-concept demonstrating a 64 MiB single-line RSS spike is included in the GitHub security advisory; no active exploitation has been confirmed (not listed in CISA KEV).
Uncontrolled resource consumption in Mailpit's thumbnail generation endpoint allows unauthenticated network clients to exhaust server memory and CPU by submitting email attachments containing image decompression bombs. The affected code path in server/apiv1/thumbnails.go calls imaging.Decode() with AutoOrientation before performing any dimension, pixel-count, or memory validation, meaning a compact on-disk image declaring enormous pixel dimensions triggers full raster allocation prior to the 180×120 scaling step. No public exploit code has been identified and the vulnerability is absent from CISA KEV; the vendor-confirmed fix is Mailpit 1.30.4.
Uncontrolled memory allocation in Mailpit's SMTP command reader allows unauthenticated remote clients to exhaust server memory by sending oversized pre-DATA command lines. Versions prior to 1.30.4 use Go's unbounded `bufio.Reader.ReadString` in `internal/smtpd/smtpd.go`, which allocates the full attacker-controlled input before any syntax rejection or RFC 5321 line-length enforcement occurs. The same vulnerable code path handles AUTH continuation lines (LOGIN, PLAIN, CRAM-MD5), so concurrent oversized inputs compound memory pressure and can reduce service availability. No public exploit identified at time of analysis; a vendor-released patch is available in v1.30.4.
Missing authorization on the toggle_like and mark_as_seen endpoints in Frappe Framework 16.31.0 and earlier allows authenticated users to interact with documents and notes they lack read access to. Any valid session holder can call these whitelisted endpoints with arbitrary doctype and document name parameters, confirming resource existence and modifying _liked_by metadata or note-seen state without a permission check. No public exploit has been identified at time of analysis, but an upstream fix exists in pull request #39760 with no released patched version confirmed.
Server-Side Request Forgery in TREK, a collaborative travel planner, allows any authenticated user to pivot the server into making blind GET requests against loopback addresses, RFC 1918 internal networks, or cloud instance metadata endpoints (e.g., 169.254.169.254). The root cause is that importGoogleList(), importNaverList(), and resolveGoogleMapsUrl() validate only the initial submitted URL via checkSsrf() but then call native fetch() with redirect:'follow', bypassing DNS-pinned safeFetch() on redirect hops. No public exploit code or CISA KEV entry has been identified at time of analysis; the CVSS 4.0 score of 5.3 reflects the authenticated prerequisite and blind (non-reflective) nature of the SSRF.
Cross-project credential reference injection in n8n before 2.34.1 allows low-privileged attackers holding a valid MCP Bearer API key to bypass authorization controls in the create_workflow_from_code MCP tool and embed references to credentials belonging to other projects into workflows they should not control. The bypass is conditional on the credential authentication type being set to 'expression', at which point n8n fails to enforce project-scoped authorization on credential objects. No public exploit code or CISA KEV listing has been identified at time of analysis, though the CVSS 4.0 score of 5.3 reflects a realistic, low-complexity network attack by authenticated users.
Uncontrolled Resource Consumption (CWE-400) in Apache InLong versions 2.0.0 through 2.3.x exposes two related attack surfaces: authenticated users can trigger excessive resource consumption to degrade service availability, and the same pathway permits upload of non-official packages, introducing a package-integrity risk alongside the denial-of-service vector. Affected deployments running any release in the 2.0.0-2.3.x range should treat this as a priority upgrade given the dual nature of the flaw. No public exploit code has been identified at time of analysis, and this CVE is not listed in the CISA KEV catalog.
Information disclosure in OpenProject 17.5.1 and earlier allows authenticated non-admin project members to read hidden admin-only custom field comment text by directly requesting the inplace-edit dialog endpoint with a raw custom_field_ identifier. The dialog resolves the field without enforcing the admin_only visibility scope, exposing stored comment content in read-only mode; the custom field value itself and all write operations remain inaccessible. No active exploitation is confirmed and no public exploit has been identified; a vendor patch is available in version 17.6.0.
ReDoS in n8n's Filter and Switch nodes allows an authenticated workflow author to monopolize a worker thread indefinitely by supplying a catastrophic backtracking regex compiled via `new RegExp()` without complexity validation or execution timeout. Affected are n8n versions before 1.123.69, 2.x before 2.33.4, and 2.34.x before 2.34.1; per-item execution amplifies the impact proportionally to dataset size, stalling all concurrent workflows on the same worker. No public exploit code or CISA KEV listing has been identified at time of analysis.
NIOWebSocket in swift-nio (all versions before 2.101.0) crashes the hosting process when any unauthenticated remote peer sends a single crafted 11-byte WebSocket frame following a completed handshake, terminating all active connections until the service restarts. Frameworks built on swift-nio - including Vapor and Hummingbird - inherit this exposure whenever they accept WebSocket connections. No public exploit code has been identified, but SSVC classifies the attack as automatable, lowering the bar for repeated or scripted denial-of-service.
ATutor 2.2.4, an end-of-life open-source e-learning platform, allows any low-privileged authenticated user enrolled in a course to bypass authorization controls on the test and question import backend endpoints, enabling unauthorized content manipulation within the course. By directly targeting import endpoints that lack proper authorization checks, a student-level account can import tests and questions they should have no permission to manage. No patch is available and none will be issued, as the product is no longer actively maintained.
File enumeration in vsDesk service desk software allows remote authenticated attackers to predict and retrieve uploaded files by brute-forcing timestamp-derived filenames within a narrow time window. Affected instances running versions prior to 14.0101 expose any uploaded document to unauthorized access by any logged-in user, enabling secondary attacks through sensitive file exfiltration. No public exploit code has been identified at the time of analysis, and no CISA KEV listing exists.
Unauthorized file upload in the AI Agent by SiteGround WordPress plugin (all versions through 1.2.7) allows attackers to inject arbitrary images into the WordPress media library by exploiting a missing upload_files capability check in the plugin's REST API endpoint. The endpoint's nonce (sg_ai_studio_gutenberg_nonce) is broadcast to all users with block editor access - including Contributors - making the absent capability check the sole enforcement barrier. No public exploit has been identified at time of analysis, and the CVSS score of 5.3 (Medium) reflects limited integrity impact with no confidentiality or availability consequence.
Insecure Direct Object Reference in ATutor 2.2.4 allows any authenticated user - including students with the lowest privilege level - to permanently delete profile pictures belonging to any other user, including instructors and administrators, by supplying an arbitrary member_id in a POST request to the profile album endpoint. The product is end-of-life with no patch forthcoming, making this a permanent unresolved exposure for any remaining deployments. No public exploit code or CISA KEV listing has been identified at time of analysis, though the exploitation barrier is minimal given only a valid student account is required.
Server-Side Request Forgery in Lightdash's scheduled delivery webhook feature allows authenticated users to direct the backend server to issue POST requests to private, loopback, and link-local addresses - including cloud instance metadata endpoints. All deployments running versions prior to 1.146.4 are affected; both the Google Chat and Microsoft Teams webhook delivery paths bypass the existing validatePublicHttpUrl sanitization that is correctly applied elsewhere in the codebase. While the upstream response is never relayed to the attacker, the error-vs-success distinction enables internal network probing and, in cloud-hosted deployments, potential access to instance metadata services. No public exploit code and no CISA KEV listing have been identified at time of analysis.
Reflected XSS in the Phoca Download Extension for Joomla (versions 5.0.0 through 6.1.4) allows unauthenticated remote attackers to inject and execute arbitrary JavaScript in a victim's browser by crafting a malicious URL containing a payload in the 'search' GET parameter. Exploitation requires social engineering to lure a victim into clicking the crafted link, after which the attacker can steal session tokens, perform actions on behalf of the victim, or redirect to malicious sites. No public exploit code has been identified and this CVE does not appear in the CISA KEV catalog at time of analysis.
Reflected cross-site scripting in Phoca Cart, a Joomla e-commerce extension by phoca.cz, affects versions 5.0.0 through 6.1.7 via the price_from and price_to URL filter parameters. An unauthenticated remote attacker can craft a malicious URL that, when visited by a victim, executes arbitrary JavaScript in the victim's browser session. No public exploit code has been identified and this vulnerability is not listed in the CISA KEV catalog at time of analysis.
Improper authorization in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0 allows authenticated remote attackers to perform unauthorized grade operations against arbitrary student records by manipulating the student_id parameter in the add_grade function at /index.php. This is a horizontal privilege escalation flaw - an authenticated user (e.g., a student) can affect records they do not own, compromising both confidentiality and integrity of academic grade data. No public exploit or active exploitation (CISA KEV) has been identified at the time of analysis, and the CVSS 4.0 score of 5.3 reflects medium severity with limited but real impact.
Compression bomb detection bypass in Tor before 0.4.9.9 enables remote unauthenticated attackers to deliver resource-exhausting payloads that evade the node's per-stream decompression safeguards. By concatenating multiple gzip or zlib sub-streams - each individually sized just below Tor's detection threshold - an attacker circumvents the aggregate bomb check entirely, potentially degrading availability of Tor nodes or relays. Tracked as TROVE-2026-022; no public exploit code or active exploitation (CISA KEV) has been identified; the CVSS 5.3 Medium score reflects the limited but real availability impact.
Integer truncation in libsoup's SoupServer Range-header comparator silently drops byte ranges from HTTP 206 Partial Content responses when the target resource exceeds approximately 2 GB. The sort_ranges() function in soup-message-headers.c narrows a 64-bit offset subtraction to a 32-bit int return value, inverting the comparator sign whenever offsets differ by more than INT_MAX, causing incorrect range sorting and silent omission of content. No public exploit code or CISA KEV listing has been identified at time of analysis; exploitation requires network access to a SoupServer instance serving files larger than ~2 GB.
Infinite loop denial-of-service in Tor before 0.4.9.9 allows a remote, unauthenticated attacker to cause sustained CPU exhaustion on a vulnerable node by delivering a crafted truncated zlib/gzip compressed stream. The root cause is in buf_add_compress(), which misinterpreted zlib's Z_BUF_ERROR return (no remaining input) as a full output buffer requiring retry, looping forever without progress. No public exploit has been identified at time of analysis, and the CVSS score of 3.7 with high attack complexity (AC:H) limits practical exploitation to adversaries capable of precisely crafting malformed compressed payloads reachable by a Tor node.
Server-side request forgery in Omnivore's scanFeedsResolver GraphQL endpoint allows authenticated users to direct the API server to fetch arbitrary internal URLs, bypassing the validateUrl() guard consistently applied elsewhere in the same codebase. Reachable internal endpoints return partial feed metadata (URL, title, description, type) and advertised RSS/Atom link elements; unreachable ports are distinguishable through error differentiation, enabling internal network enumeration. No public exploit has been identified and this vulnerability is not listed in CISA KEV; an upstream patch has been merged as commit c4d7d8562.
User enumeration in the Frauscher FDS 102 railway diagnostic system allows low-privileged remote attackers to retrieve the complete list of configured accounts and identify which hold elevated privileges via the unprotected PHP endpoint /api/user/fetch-all.php. The CPE confirms all tracked versions of the FDS 102 are affected, and the CVSS 4.0 vector (PR:L) indicates exploitation requires an existing low-privilege credential but no user interaction. No public exploit code and no active exploitation have been identified at time of analysis; this is reported by CERTVDE under advisory VDE-2026-078.
Missing Authorization in myCred's New User Approve WordPress plugin through version 3.2.8 permits unauthenticated remote attackers to exploit incorrectly configured access control security levels, resulting in unauthorized integrity modifications - most likely manipulation of user registration approval states. Reported by Patchstack and assigned a CVSS 5.3 (Medium) with vector AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N, the flaw is exploitable without credentials or user interaction against any WordPress site running the affected plugin. No active exploitation has been confirmed (not in CISA KEV), and no public exploit code has been identified at time of analysis.
Binary HTTP parser in Netty's `netty-incubator-codec-bhttp` (all versions through 0.0.22.Final) crashes with an unchecked `ArrayIndexOutOfBoundsException` when processing a 15-byte crafted payload, enabling remote unauthenticated denial of service. The parser accumulates attacker-controlled varint field lengths - read correctly as `long` - into `int` offset counters; a value of 2^31 silently wraps the accumulator negative via Java's compound-assignment narrowing, bypassing the readable-bytes guard and reaching unchecked buffer index arithmetic. Publicly available exploit code exists per the GitHub advisory GHSA-pgrf-4654-3gq8; no active exploitation is confirmed in CISA KEV.
Blind Server-Side Request Forgery in Omnivore's webhook registration flow allows any authenticated user to coerce the application server into issuing repeated HTTP requests to arbitrary internal endpoints, including cloud instance metadata services. The flaw affects all Omnivore API server deployments (CPE: cpe:2.3:a:omnivore-app:omnivore:*:*:*:*:*:*:*:*) and is rooted in setWebhookResolver accepting and persisting caller-supplied URLs with no address validation before callWebhook later executes them via axios. No public exploit identified at time of analysis, and no CISA KEV listing exists; a patch commit is available upstream.
Stored cross-site scripting in ATutor 2.2.4 allows unauthenticated attackers to register an account and inject a JavaScript payload into the phone number field, which executes in the browser of any authenticated user who subsequently visits the attacker's public profile. The immediate impact is session cookie theft, enabling account takeover of the victim without further interaction. No patch will be issued as ATutor is end-of-life; no public exploit code or CISA KEV listing has been identified at time of analysis.
Credential exfiltration in n8n's GraphQL node allows authenticated workflow authors to bypass per-credential allowed-domains enforcement. When the node's Authentication parameter is set to expression mode and two credentials of different types are attached, the platform enforces the domain restriction of only the first credential while silently forwarding secret material from the second to any destination - including attacker-controlled endpoints. No public exploit has been identified at time of analysis, but the CVSS 4.0 subsequent-system confidentiality impact is rated High, reflecting the downstream value of an exfiltrated credential that may carry permissions well beyond the n8n instance.
Server-side request forgery in ATutor's import functionalities allows an authenticated administrator to coerce the server into issuing HTTP requests to arbitrary internal endpoints, cloud metadata services such as AWS IMDSv1, or local filesystem paths via the file:// URI scheme where PHP URL wrappers are enabled. Only version 2.2.4 has been confirmed vulnerable by CERT.pl researchers; the product is end-of-life with no planned fix. No public exploit code or CISA KEV listing has been identified at time of analysis, but the combination of cloud metadata reachability and EOL status makes compensating controls the only available path.
Cross-site scripting in F-RevoCRM versions 7.3.0 through 8.0.3 enables remote attackers to inject and execute malicious client-side scripts in the browser of an authenticated user who is lured to a crafted page. The CVSS S:C (scope changed) metric confirms the injected script operates beyond the application's trust boundary, enabling session hijacking, credential theft, or unauthorized CRM operations performed under the victim's identity. No public exploit code or CISA KEV listing has been identified at time of analysis; the vulnerability was disclosed via JPCERT and documented under JVN#58692577.
Cross-Site Request Forgery in ATutor 2.2.4 allows a network-based attacker to modify authenticated users' profile fields by tricking them into visiting a malicious webpage that submits a forged profile-update request. The application lacks CSRF token validation on the profile update endpoint, so the server cannot distinguish forged requests from legitimate ones. No patch exists or will be released, as ATutor is end-of-life; no public exploit code or active exploitation has been identified at time of analysis.
Insufficient audit logging in HCL IntelliOps Event Management (IEM) allows an authenticated low-privilege network user to perform workflow actions that are not captured in security logs, breaking observability for incident response teams. All versions of IEM are affected per the wildcard CPE, and the CVSS Scope:Changed metric indicates the logging gap propagates impact to downstream audit platforms or SIEMs that depend on IEM event data. No public exploit code exists and CISA has not listed this in the KEV catalog; the primary risk is forensic and compliance-oriented rather than direct system compromise.
Authenticated path traversal in Winter CMS's LESS compilation pipeline allows backend users holding any of four specific permissions to exfiltrate arbitrary files readable by the PHP process - most critically the application .env file containing APP_KEY and database credentials. The vulnerability affects Winter CMS versions through 1.2.12 via four injection sinks: Brand Settings, Editor Settings, Mail Brand Settings colour fields, and theme CSS assets compiled by CombineAssets. No public exploit identified at time of analysis and no active exploitation confirmed, but confidentiality impact is high given .env disclosure enables full application key compromise.
Cross-meeting presentation deletion in BigBlueButton prior to 3.0.29 allows an authenticated presenter in one meeting to permanently delete presentations belonging to a different concurrent meeting by supplying an arbitrary presentationId through the /api/graphql endpoint. The affected Scala handler RemovePresentationPubMsgHdlr issued database deletes scoped only by presentationId, with no verification that the target presentation belonged to the caller's meeting. No public exploit or CISA KEV listing has been identified at time of analysis, but exploitation requires only a valid presenter session and knowledge of a foreign presentationId, making it a realistic cross-tenant sabotage vector in multi-meeting deployments.
Reflected XSS in ATutor 2.2.4's restore functionality allows an authenticated low-privileged attacker to craft a malicious URL that executes arbitrary JavaScript in a victim's browser upon interaction. The CVSS 4.0 vector (PR:L/UI:A/SC:L/SI:L) confirms the attack requires a logged-in account, active victim click, and produces subsequent-system impact on the victim's browser session - not the attacker's own context. Critically, no patch will be issued: ATutor is end-of-life and no longer actively maintained, leaving all deployments permanently exposed.
Reflected XSS in ATutor 2.2.4's preview.php enables an authenticated attacker to inject arbitrary JavaScript into a victim's browser session by manipulating the popup URL parameter. The frameset rendered by preview.php does not sanitize the popup parameter, allowing an attacker to break out of the HTML attribute context and append an event handler such as onload, even though the child frame file preview_top.php does apply sanitization. No patch exists and no patch is planned, as ATutor is no longer actively maintained; no public exploit or CISA KEV listing has been identified at time of analysis.
Cross-site scripting in Znuny's AgentTicketEmailResend template allows a high-privileged authenticated attacker to inject malicious script that executes within other agents' browser sessions, enabling session hijacking or unauthorized agent-level actions. All Znuny LTS versions prior to 6.5.22 are affected per CPE cpe:2.3:a:znuny:znuny:*:*:*:*:*:*:*:* and the vendor advisory at znuny.org/en/advisories/zsa-2026-12. No public exploit or active exploitation has been identified at time of analysis; the high privilege requirement substantially constrains the realistic threat surface.
Missing or insecure Cross-Origin Resource Sharing (CORS) headers in HCL IntelliOps Event Management (IEM) expose the application to unauthorized cross-origin browser interactions. The CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N vector indicates that a highly privileged IEM user must be socially engineered into visiting a malicious page while authenticated, allowing an attacker's script to read IEM responses or issue limited requests on the victim's behalf. No active exploitation has been confirmed and no public exploit code has been identified at time of analysis.
Heap out-of-bounds read in libvips before 8.18.3 leaks four bytes of adjacent heap memory when parsing a crafted Radiance HDR image whose first scanline begins with an RLE repeat marker. The old-style decoder in `scanline_read_old` dereferences `q[-1]` without confirming a prior pixel exists, disclosing data most likely belonging to adjacent image buffers. No public exploit or active exploitation has been identified; the fix is confirmed in the v8.18.3 release.
Cache isolation failure in django CMS allows unauthenticated network attackers to both read other users' header-personalized page content and poison the page cache with attacker-chosen content. Affected installations must have CMS_PAGE_CACHE enabled and at least one plugin implementing get_vary_cache_on() - when those conditions hold, the page cache key is computed without the plugin-declared header values, so the first cached variant is served to all subsequent visitors regardless of their headers. No public exploit exists and CISA KEV has not listed this vulnerability, but the attack is mechanically straightforward in affected configurations.
SVG attribute injection in @dicebear/core and @dicebear/initials prior to 9.4.3 enables cross-site scripting when an application routes untrusted input through the rotate, fontSize, or fontWeight avatar options. TypeScript types these parameters as numbers, but JavaScript runtime coercion allows string values, permitting attribute breakout and injection of arbitrary SVG markup — payloads confirmed in the commit test suite include onerror-carrying <image> elements. Script executes in the page origin when the generated SVG is inlined or served as image/svg+xml; no public exploit identified at time of analysis and no CISA KEV listing, but the patch commit exposes working injection strings.
Terminal escape sequence injection in Ember's interactive TUI allows unauthenticated remote attackers to smuggle ANSI/OSC/CSI control bytes into an operator's terminal by embedding them in HTTP requests sent to the monitored Caddy server. Ember's ParseLogLine restores raw control bytes from Caddy's unicode-escaped JSON access log, and the render helpers fitCellLeft and fitCellRight pass them unfiltered to os.Stdout via bubbletea's View(), enabling clipboard hijacking (OSC 52), dashboard spoofing (CSI cursor/erase), and window-title manipulation (OSC 0/2). No CISA KEV listing or confirmed public exploit exists at time of analysis; the 'RCE' tag in the intelligence metadata conflicts with the advisory's explicit statement that this is not general-case RCE and should not drive incident response decisions without independent verification.
Stored XSS and arbitrary file upload in Laravel Backpack CRUD allows an authenticated admin to bypass the `SingleBase64Image` uploader's trivial `data:image` prefix check, writing files of any MIME type - including SVG with embedded JavaScript - to the configured storage disk. A companion bug in `FileNameGenerator` causes stored files to receive extensionless names because `mime_content_type()` returns false when passed a data URI string rather than a filesystem path, compounding server-side MIME enforcement failures. Affected versions span 6.0.0-6.8.13 and 7.0.0-7.0.37; vendor-released patches 6.8.14 and 7.0.38 address both flaws. No public exploit code or CISA KEV listing was identified at time of analysis.
Stored XSS in django CMS 5.0.8 allows an authenticated editor to execute arbitrary HTML in other staff users' browsers via the edit-mode plugin exception rendering path. When plugin rendering fails in edit mode, ContentRenderer.render_exception in cms/plugin_rendering.py interpolates attacker-controlled values - including get_short_description() output, exception messages, and placeholder source strings - into an HTML heading using an unsafe f-string, then returns the result through mark_safe, bypassing Django's autoescaping. No public exploit has been identified at time of analysis, and this vulnerability is not listed in CISA KEV.
Incomplete HTML escaping in Xapian::MSet::snippet() within xapian-core exposes web applications using this search library to cross-site scripting attacks via a missed corner case of the previously patched CVE-2018-0499. Affected versions include all xapian-core releases before 2.1.0 and before 1.4.32. No public exploit code has been identified and this vulnerability is not listed in the CISA KEV catalog, but applications that render snippet() output directly into web pages without additional sanitization are at real risk.