CVE Intelligence

Vulnerabilidades de Mlogclub

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Mlogclub: 1 registro(s), com severidade, exploração e correções.

Bbs-go 1

Somente exploradas (KEV) →

CVE-2026-110103 Média · 5.4 CWE-79 13/10/2026
bbs-go through 4.4.6 Stored XSS via Image Upload Content-Type
bbs-go through 4.4.6 contains a stored cross-site scripting vulnerability that allows authenticated users to upload HTML or SVG files by spoofing the multipart Content-Type in POST /api/upload. Attackers can upload script-bearing documents served inline from /res and send their URLs to administrators, executing script on the forum's origin.