Medium CVE-2026-25557 Evoluted PHP Directory Listing Script through 4.0.5 contains a reflected cross-site scripting vulnerability in index.php where the dir parameter value is reflected without HTML encoding inside the HTML title element and inside anchor href attributes in the breadcrumb...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

[Medium] CVE-2026-25557 – Evoluted PHP Directory Listing Script through 4.0.5 contains a reflected cross-s...

VERWANDTEARTIKEL

CVE-2026-11645

CVE-2026-53673 - BuddyPress 14.4.0 Private Message IDOR via REST API user_id Parameter

CVE-2026-45782 - Cloud Hypervisor: Use-after-free in virtio-block Async I/O Completion

CVE-2026-46491 - SimpleSAMLphp casserver FileSystemTicketStore path traversal allows out-of-ticket-directory read/unserialize and conditional deletion

CVE-2026-41729 - Spring Data REST SpEL Injection via Map Key in JSON Patch

CVE-2026-41732 - In Spring for Apache Pulsar, overly broad trusted-package matching in header mapper exposes JDK classes to deserialization