Threats tagged 'ghsa-g7gw-qx49-52c2'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.4	EPSS 0.2%	CVE-2026-64944answer · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Medium5.4EPSS 0.2%2026-10-19GCVE DatabaseCVE-2026-64944 CVE-2026-64944 is a stored cross-site scripting (XSS) vulnerability in Apache Answer through version 2.0.2. The vulnerability arises because imported question bodies are stored as raw HTML without sanitization, allowing attacker-controlled HTML to be persisted and rendered to all users, including privileged ones. This issue is fixed in version 2.0.3. EPSS 0.2%Report on CVE-2026-64944 Vulnerability CWE-79 #ghsa-g7gw-qx49-52c2	GCVE Database	2026-10-19

Page 1 of 1