YouMind

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

YouMind records in CISA KEV

No YouMind vulnerabilities are listed in CISA KEV.

1 record

TI-2026-71597 CVE-2026-96535 · GHSA-mrvg-xhq8-v864

LOW 23

Cross-Site Scripting on the YouMind portal, specifically in the avatar update endpoint, when setting a profile picture via an arbitrary URL.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00234 Published 2026-10-13 Fixed in 13/10/2026 CWE-79