joshnuss

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

joshnuss records in CISA KEV

No joshnuss vulnerabilities are listed in CISA KEV.

3 records

TI-2026-35946 CVE-2026-48590

MEDIUM 44

XML Injection vulnerability in joshnuss xml_builder (XmlBuilder module) allows Content Spoofing, XML Injection.

CVSS 4.0LOW 2.1 Local No auth No interaction EPSS 0.00226 Published 2026-08-21 Fixed in 2.4.1 CWE-91

TI-2026-34682 CVE-2026-47080

MEDIUM 44

XML Injection vulnerability in joshnuss xml_builder (XmlBuilder module) allows Content Spoofing, XML Injection.

CVSS 4.0LOW 2.1 Local No auth No interaction EPSS 0.00222 Published 2026-08-21 Fixed in 2.4.1 CWE-91

TI-2026-34681 CVE-2026-47079

MEDIUM 44

Inappropriate Encoding for Output Context vulnerability in joshnuss xml_builder (XmlBuilder module) allows Content Spoofing, Cross-site Scripting.

CVSS 4.0LOW 2.1 Local No auth No interaction EPSS 0.00189 Published 2026-08-21 Fixed in 2.4.1 CWE-838