IT-Sentinel

« BACK_TO_HOME

PUBLISHED

2026-03-11 06:17

MODIFIED

2026-03-11 06:17

EPSS (Prob. Exploit)

0.17%

Top 93.7%

DATA SOURCES:

NVD 🔗 2026-03-11 FIRST EPSS 🔗 2026-11-08 GITHUB 🔗 2026-11-05

> DESCRIPTION

The DukaPress WordPress plugin through 3.2.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> GITHUB SECURITY ADVISORY

GHSA-5rfv-h47g-xj42 MODERATE

Mattermost MS Teams plugin doesn't limit the request body size on the /changes webhook endpoint

AFFECTED PACKAGES:

GO / github.com/mattermost/mattermost-plugin-msteams

< 1.15.1-0.20260213190728-6fe4d295592e

Fixed in: 1.15.1-0.20260213190728-6fe4d295592e

> HISTORIQUE DES MODIFICATIONS

Première apparition

11/03/2026 06:17

Source: NVD

Total des modifications: 0 Dernière mise à jour: 7 months ago

> REFERENCES