CVE-2026-104394 Unauthenticated Cross Site Scripting (XSS) in Charitable <= 1.8.12.3 versions

Description

Unauthenticated Cross Site Scripting (XSS) in Charitable <= 1.8.12.3 versions.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Charitable 1.8	premières → 1.8.12.3	Pas de correctif indiqué

Autres CVE de Charitable

Les 5 CVE de Charitable →

CVE-2026-81287 Subscriber SQL Injection in Charitable <= 1.8.12.1 versions 8.5 Élevée CVE-2026-73994 Unauthenticated Broken Access Control in Charitable <= 1.8.11.3 versions 7.5 Élevée CVE-2025-47520 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Syed Balkhi… 5.9 Moyenne CVE-2025-30770 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Syed Balkhi… 6.5 Moyenne