Threats tagged 'ghsa-xq3p-hvp4-53qf'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Critical	9.3	CVE-2026-126945Zipline before 4.5.1 contains a stored cross-site scripting vulnerability in the HighlightCode component that renders Critical9.32026-11-13GCVE DatabaseCVE-2026-126945 Zipline versions before 4.5.1 have a stored cross-site scripting (XSS) vulnerability in the HighlightCode component. This flaw allows authenticated users to upload text files with malicious HTML/JavaScript that execute in other users' browsers when the file content is rendered unescaped. The vulnerability enables attackers to perform actions such as changing account details on behalf of victims. Report on CVE-2026-126945 Vulnerability CWE-79 #ghsa-xq3p-hvp4-53qf	GCVE Database	2026-11-13

Page 1 of 1