Threat database

1 threat

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.5	EPSS 0.2%	CVE-2026-105220twinejs · Cross-site Scripting High8.5EPSS 0.2%2026-10-04CVE Database V5CVE-2026-105220 Twine 2 desktop through 2.12.0 contains a cross-site scripting vulnerability in importStories() that executes markup from imported story files in the editor window. Attackers can craft a story file whose script calls the twineElectron openWithScratchFile IPC bridge to write and open a .bat file, executing code as the user. EPSS 0.2%Vulnerability klembot	CVE Database V5	2026-10-04

Showing 1–1 of 1 result