Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: givanz Vvveb — GitHub Security Advisory (GHSA-wwmv-4g9g-p48g) Clear all filters
TI-2026-30331 CVE-2026-41929

Vvveb < 1.0.8.2 Unauthenticated Reflected XSS via Visual Editor

Priority MEDIUM 56

Vvveb before 1.0.8.2 contains an unauthenticated reflected cross-site scripting vulnerability in the visual editor preview renderer that allows attackers to execute arbitrary JavaScript by manipulating the r query parame…

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00243 Published 2026-05-07 Fixed in 1.0.8.2 CWE-79
TI-2026-30340 CVE-2026-41938

Vvveb < 1.0.8.2 RCE via Media Upload Handler

Priority HIGH 73

Vvveb before version 1.0.8.2 contains an unrestricted file upload vulnerability in the media upload handler that allows authenticated users with media-upload permissions to bypass extension restrictions by uploading a .h…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00718 Published 2026-05-06 Fixed in 1.0.8.2 CWE-434