Threats tagged 'ghsa-5j2p-3grc-r3fc'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.1	CVE-2026-116212Webasyst Framework through 4.4.0 contains a stored cross-site scripting vulnerability in the Photos app that allows Medium5.12026-10-26GCVE DatabaseCVE-2026-116212 Webasyst Framework versions through 4.4.0 have a stored cross-site scripting (XSS) vulnerability in the Photos app. Authenticated backend users with album edit permissions can inject JavaScript via the album url parameter. This injection occurs because the url parameter is not properly escaped in the DialogAlbumSettings.html file, allowing script execution in administrator backend sessions. Report on CVE-2026-116212 Vulnerability CWE-79 #ghsa-5j2p-3grc-r3fc	GCVE Database	2026-10-26

Page 1 of 1