Vulnerabilities

3 records

Sort

TI-2026-34681 CVE-2026-47079

Round-trip Corruption via Improper Entity Escaping in xml_builder

MEDIUM 44

Inappropriate Encoding for Output Context vulnerability in joshnuss xml_builder (XmlBuilder module) allows Content Spoofing, Cross-site Scripting.

CVSS 4.0LOW 2.1 Local No auth No interaction EPSS 0.00189 Published 2026-08-21 Fixed in 2.4.1 CWE-838

TI-2026-35946 CVE-2026-48590

MEDIUM 44

XML Injection vulnerability in joshnuss xml_builder (XmlBuilder module) allows Content Spoofing, XML Injection.

CVSS 4.0LOW 2.1 Local No auth No interaction EPSS 0.00226 Published 2026-08-21 Fixed in 2.4.1 CWE-91

TI-2026-34682 CVE-2026-47080

MEDIUM 44

XML Injection vulnerability in joshnuss xml_builder (XmlBuilder module) allows Content Spoofing, XML Injection.

CVSS 4.0LOW 2.1 Local No auth No interaction EPSS 0.00222 Published 2026-08-21 Fixed in 2.4.1 CWE-91