CVE-2026-104394 Unauthenticated Cross Site Scripting (XSS) in Charitable <= 1.8.12.3 versions

Description

Unauthenticated Cross Site Scripting (XSS) in Charitable <= 1.8.12.3 versions.

Affected products and versions

Product	Affected versions	Fixed in
Charitable 1.8	earliest → 1.8.12.3	No fix stated

Other CVEs of Charitable

The 5 CVEs of Charitable →

CVE-2026-81287 Subscriber SQL Injection in Charitable <= 1.8.12.1 versions 8.5 High CVE-2026-73994 Unauthenticated Broken Access Control in Charitable <= 1.8.11.3 versions 7.5 High CVE-2025-47520 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Syed Balkhi… 5.9 Medium CVE-2025-30770 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Syed Balkhi… 6.5 Medium