Skip to content
OpenAdvisories

Product · inovector

mixpost

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2026-57958

    Mixpost 2.6.0 - Reflected XSS via OAuth Callback Error Parameter

    Mixpost through 2.6.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to execute arbitrary JavaScript in authenticated users' browsers by crafting malicious OAuth callback URLs with unsanitized error query paramet…

    inovector mixpost