Skip to content
OpenAdvisories

Vendor

dbarzin

1 known vulnerabilities.

Products

mercator 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.5
    CVE-2026-27639

    Mercator vulnerable to stored XSS via unescaped Blade directives in display templates

    Mercator is an open source web application designed to enable mapping of information systems. A stored Cross-Site Scripting (XSS) vulnerability exists in Mercator prior to version 2026.02.22 due to the use of unescaped Blade directives (`{!! !!}`) in display …

    dbarzin mercator