Skip to content
OpenAdvisories

Product · Daniel Brendel

HortusFox

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2026-72559

    Daniel Brendel HortusFox - Cross-Site Scripting

    A stored cross-site scripting vulnerability in HortusFox 5.9 allows authenticated workspace members to inject persistent JavaScript into plant notes via Parsedown rendered without safe mode. Notes are rendered unescaped in the browser of every user who views …

    Daniel Brendel HortusFox