Threats tagged 'ghsa-8jq6-8g6v-g3cr'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.1	CVE-2026-121928InfiniFlow RAGFlow · Cross-site Scripting Medium5.12026-11-04GCVE DatabaseCVE-2026-121928 A cross-site scripting (XSS) vulnerability exists in InfiniFlow RAGFlow up to version 0.27.2 in the Images API component, specifically in the file api/utils/file_utils.py. The vulnerability can be exploited remotely and allows an attacker to execute malicious scripts. A public exploit is available. Upgrading to version 0.27.3 addresses this issue. Report on CVE-2026-121928 Vulnerability CWE-79 #ghsa-8jq6-8g6v-g3cr	GCVE Database	2026-11-04

Page 1 of 1