CVE-2026-32774 in Vulnogram

الملخص

بحسب MITRE • 16/03/2026

Vulnogram 1.0.0 contains a stored cross-site scripting vulnerability in comment hypertext handling that allows attackers to inject malicious scripts. Remote attackers can inject XSS payloads through comments to execute arbitrary JavaScript in victims' browsers.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• مسؤول: VulnCheck
• حجز: 14/03/2026
• إفشاء: 16/03/2026
• الاعتدال: تمت الموافقة
• إدخال: VDB-351090
• CPE: جاهز
• CWE: CWE-79 (مؤكد)
• CVSS: 5.4 (NVD)
• EPSS: 0.00277
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-32774
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-32774
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-32774/