Threats Tagged 'ghsa-9prg-2pw9-j2rf'

1 threat

Threats Tagged 'ghsa-9prg-2pw9-j2rf'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.3%	CVE-2026-114404PHPPresentation · Cross-site Scripting Medium5.3EPSS 0.3%2026-10-21CVE Database V5CVE-2026-114404 PHPOffice PHPPresentation 1.2.0 contains a cross-site scripting vulnerability in the HTML writer that allows attackers who supply presentation content to inject script into generated HTML. Attackers can craft a PPTX with malicious text runs, hyperlink relationship targets, or shape descr attributes that are emitted unescaped, executing script in viewers' browsers. EPSS 0.3%Vulnerability PHPOffice #ghsa-9prg-2pw9-j2rf	CVE Database V5	2026-10-21

Showing 1–1 of 1 result