CVE-2026-48788 - Remark42: Cross-Site Scripting (XSS) on /api/v1/img via content-type spoofing
CVE ID :CVE-2026-48788 Published : June 16, 2026, 10:29 p.m. | 4 hours, 39 minutes ago Description :Remark42 is a self-hosted comment engine for blogs, articles, or any other place where readers can add comments. Versions 1.6.0 through 1.15.0 contain a Cross-Site Scripting (XSS) vulnerability...