Skip to content
OpenAdvisories

Package · Go

github.com/umputun/remark42

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    CVE-2026-48788

    Remark42: Cross-Site Scripting (XSS) on /api/v1/img via content-type spoofing

    Remark42 is a self-hosted comment engine for blogs, articles, or any other place where readers can add comments. Versions 1.6.0 through 1.15.0 contain a Cross-Site Scripting (XSS) vulnerability exploitable through content-type spoofing. The Remark42 image pro…

    umputun remark42 github.com/umputun/remark42 Go