FacturaScripts vulnerable to stored XSS via product reference in sales/purchases

CVE-2026-42877

## Summary A stored Cross-Site Scripting (XSS) vulnerability exists in the product search modal of sales and purchases

历史摘要 · 未重新核验 · GitHub Advisory

FacturaScripts vulnerable to Reflected Cross-Site Scripting (XSS) via Cookie Manipulation

CVE-2026-27964

### Summary A Reflected Cross-Site Scripting (XSS) vulnerability exists in the fsNick cookie parameter. The application

历史摘要 · 未重新核验 · GitHub Advisory

FacturaScripts Vulnerable to Unstripped Image Metadata (EXIF) Leakage via Library Module File Upload/Download

CVE-2026-27892

## Summary **Fectura Scripts** is an open-source ERP application, a **sensitive information disclosure vulnerability**

历史摘要 · 未重新核验 · GitHub Advisory

FacturaScripts Vulnerable to Remote Code Execution (RCE) via Zip Slip in Plugin Upload Mechanism

CVE-2026-27891

### Summary A Critical vulnerability exists in the `Plugins::add()` function. The system fails to properly validate the

历史摘要 · 未重新核验 · GitHub Advisory

Compromised tag of intercom-php published via GitHub

### Impact On April 30, 2026, a malicious commit was pushed to the intercom/intercom-php repository and tagged as versi

历史摘要 · 未重新核验 · GitHub Advisory

AVideo Vulnerable to Exposure of Sensitive Information to an Unauthorized Actor and Missing Authorization

CVE-2026-43885

### Summary An unauthenticated user can read `APISecret` from `objects/plugins.json.php` and use it to call protected

历史摘要 · 未重新核验 · GitHub Advisory

AVideo has SSRF Protection Bypass via HTTP Redirect and DNS Rebinding in isSSRFSafeURL()

CVE-2026-43884

### Summary Two endpoints in AVideo call `isSSRFSafeURL()` to validate user-supplied URLs, then fetch them using bare `

历史摘要 · 未重新核验 · GitHub Advisory

AVideo: IDOR in PayPalYPT Plugin Allows Any Authenticated User to Cancel Arbitrary PayPal Subscription Agreements

CVE-2026-43883

## Summary `plugin/PayPalYPT/agreementCancel.json.php` cancels a PayPal billing agreement using an attacker-supplied `a

历史摘要 · 未重新核验 · GitHub Advisory

AVideo: Unauthenticated CRLF/ICS Injection in Scheduler downloadICS.php Allows Calendar Event Spoofing

CVE-2026-43882

## Summary The unauthenticated `plugin/Scheduler/downloadICS.php` endpoint passes attacker-controlled `title`, `descrip

历史摘要 · 未重新核验 · GitHub Advisory

AVideo: Unauthenticated User Enumeration in objects/users.json.php via isCompany Parameter Allows Bypass of the Admin-Only Listing Restriction

CVE-2026-43881

## Summary `objects/users.json.php` exposes two unauthenticated paths that disclose the full set of registered user acc

历史摘要 · 未重新核验 · GitHub Advisory

AVideo: Unauthenticated Arbitrary Email Sending via sendEmail.json.php Enables Phishing from the Site’s Legitimate From Address

CVE-2026-43880

## Summary `objects/sendEmail.json.php` exposes two branches depending on whether `contactForm=1` is submitted. When th

历史摘要 · 未重新核验 · GitHub Advisory

AVideo has Blind SSRF in YPTWallet Donation Webhook via Missing isSSRFSafeURL() Check and CURLOPT_FOLLOWLOCATION Redirect Bypass

CVE-2026-43879

## Summary An authenticated user can configure their own donation-notification webhook URL to point at internal/loopbac

历史摘要 · 未重新核验 · GitHub Advisory

Grav is Vulnerable to Stored XSS via Tag Injection

CVE-2026-42611

### Summary A low-privileged (with the ability to create a page) user can cause XSS with the injection of `svg` element.

历史摘要 · 未重新核验 · GitHub Advisory

Grav is Vulnerable to XXE via SVG Upload

Dear Grav Security Team, A security vulnerability was discovered in Grav CMS that allows authenticated attackers to rea

历史摘要 · 未重新核验 · GitHub Advisory

Grav has Unauthenticated Path Traversal & Arbitrary File Write in its FormFlash component

CVE-2026-42608

# Vulnerability Report: Grav CMS Unauthenticated Path Traversal & Arbitrary File Write **[ZERO-DAY] Unauthenticated Pat

历史摘要 · 未重新核验 · GitHub Advisory

Grav Vulnerable to Administrative Account Disruption and Privilege De-escalation via User Overwrite Logic

CVE-2026-42609

### Summary A business logic vulnerability in the Grav Admin Panel allows a low-privileged user (with only user creation

历史摘要 · 未重新核验 · GitHub Advisory

Grav has Insecure Deserialization in File Cache

# Insecure Deserialization in File Cache - **Severity:** High - **CWE:** CWE-502 - **Location:** `system/src/Grav/Fram

历史摘要 · 未重新核验 · GitHub Advisory

Grav has multiple RCE vectors: unsafe unserialize (x3), command injection in git clone, SSTI blocklist bypass

Multiple RCE vectors were found in Grav CMS. Three are critical, two are high. **1. Unsafe unserialize() in JobQueue —

历史摘要 · 未重新核验 · GitHub Advisory

Grav Vulnerable to Publisher-Level Stored XSS via Unquoted Event Attributes

CVE-2026-42612

### Summary A stored Cross-Site Scripting (XSS) vulnerability in `getgrav/grav` allows publisher-level accounts to execu

历史摘要 · 未重新核验 · GitHub Advisory

Grav Vulnerable to Sensitive Information Disclosure via Accounts Service Bypass

CVE-2026-42610

## Summary Information disclosure exists in `Grav CMS v1.8.0-beta.29`. Despite previous security patches (notably in `v1

历史摘要 · 未重新核验 · GitHub Advisory