Skip to content
OpenAdvisories

Vendor

GBIF

4 known vulnerabilities.

Products

Integrated Publishing Toolkit 4
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.8
    CVE-2026-71881

    Cross-site scripting in Integrated Publishing Toolkit

    Multiple injection issues in resource metadata fields in GBIF Integrated Publishing Toolkit versions before 3.3.5 allows authenticated remote attackers to execute code in another user's session after user interaction via stored cross-site scripting

    GBIF Integrated Publishing Toolkit