An information disclosure vulnerability in the Forocoches comments editor that allows an attacker to obtain unauthorised user information by inserting an image containing a malicious external URL into a comment.
CVSS 4.0HIGH 8.2·Network·Low privileges·User interaction·EPSS 0.00294·Published 2026-10-30·Fixed in May 2026CWE-200
