CVE-2026-32774

Summary

Vulnogram 1.0.0 contains a stored cross-site scripting vulnerability in comment hypertext handling that allows attackers to inject malicious scripts. Remote attackers can inject XSS payloads through comments to execute arbitrary JavaScript in victims' browsers.

Affected Software

Weaknesses

• CWE-79: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

CVE Program Container

Additional References

• https://github.com/Vulnogram/Vulnogram/commit/2f0e21b113c58124084c7b74c9768fc241126a05

References

• https://github.com/Vulnogram/Vulnogram/security/advisories/GHSA-pg4p-2985-gvxr
• https://github.com/Vulnogram/Vulnogram
• https://www.vulncheck.com/advisories/vulnogram-stored-cross-site-scripting-via-comment-hypertext

• ←Previous
• Next→