Archive
27 July 2026
Vulnerabilities first published on this day (UTC), newest first.
3 results · Clear filters · Feed
-
Medium 6.3CVE-2026-14856 Public exploit
Stored Cross-Site Scripting (XSS) in TastyIgniter Media Manager
A stored Cross-Site Scripting (XSS) vulnerability in the file upload functionality of the Media Manager in TastyIgniter v4.3.0, caused by insufficient validation and sanitization of SVG files. An authenticated user with low privileges can upload a malicious S…
-
Medium 4.9CVE-2026-51564 Public exploit
An issue in the redirect parameter in Milk admin <=0.9.8 allows remote attackers to redirect users to arbitrary externa…
-
Medium 6.1CVE-2026-51565 Public exploit
Cross-site scripting (XSS) vulnerability in Modules/Docs/DocsController.php in Milk admin <=0.9.8 allows remote attacke…