CVE-2026-78742: n/a

CVE-2026-78742 identifies a Cross Site Scripting (XSS) vulnerability affecting Silverpeas Core versions up to 6.4.6. The flaw exists in the Multimedia library application introduction, enabling an attacker to inject and execute malicious scripts in users' browsers. The vulnerability has a CVSS v3.1 base score of 6.1, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and low impact on confidentiality and integrity, with no impact on availability. There is no information about known exploits in the wild or vendor-provided patches.

Successful exploitation of this XSS vulnerability could allow an attacker to execute arbitrary scripts in the context of a victim's browser session, potentially leading to information disclosure or manipulation of user interactions within the affected application. The impact is rated medium, with limited confidentiality and integrity impact and no availability impact. There is no evidence of active exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. In the absence of an official fix, users should consider applying any available workarounds or mitigations recommended by the vendor. Avoiding user interaction with untrusted content in the Multimedia library application introduction may reduce risk.