Skip to content
OpenAdvisories

Vendor

inovector

1 known vulnerabilities.

Products

mixpost 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2026-57958

    Mixpost 2.6.0 - Reflected XSS via OAuth Callback Error Parameter

    Mixpost through 2.6.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to execute arbitrary JavaScript in authenticated users' browsers by crafting malicious OAuth callback URLs with unsanitized error query paramet…

    inovector mixpost