Skip to content
OpenAdvisories

Product · MbinOrg

mbin

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2026-126569

    Mbin 1.2.1 before 1.11.1 Stored XSS via Markdown Image Nested in Link

    Mbin 1.2.1 before 1.11.1 contains a stored cross-site scripting vulnerability in EmbedElement::buildDestructed() that renders nested Markdown image alt text and URL without HTML escaping. Authenticated users can embed HTML in the alt text of an image inside a…

    MbinOrg mbin