TI-2026-25307 CVE-2026-32844 · GHSA-2w7v-rg88-q38wXinLiangCoder / php_api_doc Reflected XSS via list_method.phpPriority LOW 23XinLiangCoder php_api_doc through commit 1ce5bbf contains a reflected cross-site scripting vulnerability in list_method.php that allows remote attackers to execute arbitrary JavaScript in a victim's browser by injecting…CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00267 · Published 2026-03-20 · No fix listed CWE-79