Skip to content
OpenAdvisories

Vendor

kohler

4 known vulnerabilities.

Products

hotcrp 4
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.3
    CVE-2026-25156

    HotCRP vulnerable to stored XSS via comment attachments

    HotCRP is conference review software. HotCRP versions from October 2025 through January 2026 delivered documents of all types with inline Content-Disposition, causing them to be rendered in the user’s browser rather than downloaded. (The intended behavior was…

    kohler hotcrp