CVE-2026-30139

Summary

A reflected cross-site scripting (XSS) vulnerability in the AdvancedSearch functionality of Silverpeas Core before version 6.4.6 allows attackers to execute arbitrary JavaScript in the context of a user's browser via crafted input.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: partial

Additional References

• https://github.com/bodd1593/CVEs-huyle/tree/main/CVE-2026-30139

References

• https://github.com/Silverpeas/Silverpeas-Core/pull/1421
• https://github.com/bodd1593/CVEs-huyle/tree/main/CVE-2026-30139

• ←Previous
• Next→