Skip to content
OpenAdvisories

Vendor

YouMind

1 known vulnerabilities.

Products

YouMind web application 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.1
    CVE-2026-96535

    Cross-Site Scripting in the YouMind web application

    Cross-Site Scripting on the YouMind portal, specifically in the avatar update endpoint, when setting a profile picture via an arbitrary URL. This occurs due to a lack of sanitisation and validation of SVG content when setting an SVG image containing embedded …

    YouMind YouMind web application