VULNERABILITY INTELLIGENCE

CVE-2026-32774

CVSS score6.4 MEDIUM
EPSS probability0.29%
CISA KEVNot currently listed
Published2026-03-16
Last modified2026-10-08
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Description

Vulnogram 1.0.0 contains a stored cross-site scripting vulnerability in comment hypertext handling that allows attackers to inject malicious scripts. Remote attackers can inject XSS payloads through comments to execute arbitrary JavaScript in victims' browsers.

Weakness classification

  • disclosure@vulncheck.com: CWE-79

Primary references