Twig: Possible sandbox bypass when using a source policy

CVE-2026-24425

# Description When using the sandbox with a `SourcePolicyInterface`, Twig does not always apply the sandbox restriction

历史摘要 · 未重新核验 · GitHub Advisory

Shopper: Authorization bypass and RBAC privilege escalation in team settings

CVE-2026-47744

## Impact Two distinct authorization defects in the team settings allowed any authenticated panel user to take over the

历史摘要 · 未重新核验 · GitHub Advisory

Shopper: Multiple data integrity and disclosure issues in admin Livewire components

CVE-2026-47743

## Impact Three related defects on admin Livewire components allowed data tampering, sensitive data disclosure, and sto

历史摘要 · 未重新核验 · GitHub Advisory

Shopper: Missing per-action authorization on PaymentMethods, Currencies and Carriers admin tables

CVE-2026-47745

## Impact The admin tables for `PaymentMethods`, `Currencies` and `Carriers` exposed inline toggles and per-record acti

历史摘要 · 未重新核验 · GitHub Advisory

Shopper: Missing authorization on Product admin Livewire sub-form components

CVE-2026-47742

## Impact Sub-form Livewire components used in the product editor (`Edit`, `Inventory`, `Seo`, `Shipping`, `Files`) had

历史摘要 · 未重新核验 · GitHub Advisory

TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` injection

CVE-2026-47761

### Impact Stored XSS vulnerability in the media plugin. Attackers can inject malicious scripts via crafted `data-mce-*`

历史摘要 · 未重新核验 · GitHub Advisory

TinyMCE Cross-Site Scripting (XSS) vulnerability through `mce:protected` comments

CVE-2026-47762

### Impact Stored XSS vulnerability via forged mce:protected comments. Allows attackers to bypass sanitization and injec

历史摘要 · 未重新核验 · GitHub Advisory

TinyMCE Cross-Site Scripting (XSS) vulnerability using through data-mce- prefixed src, href, style attributes

CVE-2026-47759

### Impact Stored XSS vulnerability via unsanitized data-mce-* attributes (data-mce-href, data-mce-src, data-mce-style).

历史摘要 · 未重新核验 · GitHub Advisory

TinyMCE Cross-Site Scripting (XSS) vulnerability using sanitization bypass through nested SVGs

CVE-2026-47760

### Impact TinyMCE 6.8.x contains an XSS vulnerability caused by improper SVG namespace scope handling in the sanitizer.

历史摘要 · 未重新核验 · GitHub Advisory

Froxlor's API Authentication bypasses 2FA Authentication

## Summary Froxlor's API authentication (`FroxlorRPC::validateAuth`) does not enforce Two-Factor Authentication. When a

历史摘要 · 未重新核验 · GitHub Advisory

Froxlor: BIND Zone File Injection via TXT Record Content

CVE-2026-41234

## Summary The `DomainZones.add` API endpoint does not sanitize newline characters in TXT record content. An authentica

历史摘要 · 未重新核验 · GitHub Advisory

backpack/crud is vulnerable to Cross-Site Scripting (XSS)

CVE-2022-31114

### Impact It’s a “*moderate*” vulnerability… but being an admin panel, take this seriously. It’s difficult… but an att

历史摘要 · 未重新核验 · GitHub Advisory

formie's unauthenticated front-end submission editing can overwrite existing submissions

CVE-2026-47266

### Impact Unauthenticated users could modify existing submissions by posting a known or guessed submission ID to `formi

历史摘要 · 未重新核验 · GitHub Advisory

Admidio: Any logged-in user can delete inventory fields via `mode=field_delete` — incomplete fix of #2024

CVE-2026-47233

## Summary Commit `d37ca6b27b9674238e58491cf7ba292e66898f15` ("Delete item not check admin rights #2024", 2026-04-12) a

历史摘要 · 未重新核验 · GitHub Advisory

Admidio writes session IDs and auto-login cookie values to application logs

CVE-2026-47234

## Summary When debug logging is enabled, `Session::setCookie()` logs full cookie values and `Session::start()` logs th

历史摘要 · 未重新核验 · GitHub Advisory

Admidio PKCS#12 private key export action lacks CSRF protection

CVE-2026-47232

## Summary The sensitive `mode=export` action in `modules/sso/keys.php` exports a PKCS#12 bundle containing the configu

历史摘要 · 未重新核验 · GitHub Advisory

Admidio has IDOR in `documents-files.php` `mode=move_save` that lets any folder-uploader exfiltrate files from private folders

CVE-2026-47231

## Summary `modules/documents-files.php` gates state-changing modes by checking that the actor has `hasUploadRight()` o

历史摘要 · 未重新核验 · GitHub Advisory

Admidio: IDOR in documents-files.php allows cross-folder file rename and description changes by unauthorized uploaders

CVE-2026-47230

## Summary `modules/documents-files.php` mode `file_rename_save` shares the same root-cause shape as the cross-folder m

历史摘要 · 未重新核验 · GitHub Advisory

Admidio: CSRF in SSO client `enable` action toggles SAML/OIDC clients without token validation

CVE-2026-47229

## Summary `modules/sso/clients.php` validates an `adm_csrf_token` on every state-changing branch except `enable`. The

历史摘要 · 未重新核验 · GitHub Advisory

Admidio's CSRF in registration `send_login` mode resets arbitrary user passwords

CVE-2026-47228

## Summary `modules/registration.php` mode `send_login` regenerates a random password for `user_uuid_assigned`, stores

历史摘要 · 未重新核验 · GitHub Advisory