Threats tagged 'ghsa-6v99-wm53-w5jm'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.4	CVE-2026-106134Progress Software KendoReact · Cross-Site Scripting (XSS) Medium5.42026-11-06GCVE DatabaseCVE-2026-106134 A Cross-Site Scripting (XSS) vulnerability exists in the Menu component of Progress Software KendoReact versions 1.3.0 through 16.1.0. This flaw allows a low-privileged attacker who can influence Menu item data to execute arbitrary JavaScript in the context of the affected application when a user selects a malicious Menu item URL. Report on CVE-2026-106134 Vulnerability CWE-79 #ghsa-6v99-wm53-w5jm	GCVE Database	2026-11-06

Page 1 of 1