mbinorg mbin vulnerabilities, newest first

By year: all 2026 2025 2024 2023 2022 2021

1. 5.1CVE-2026-126569EPSS 0.2%2026-11-11

   Mbin 1.2.1 before 1.11.1 contains a stored cross-site scripting vulnerability in EmbedElement::buildDestructed() that renders nested Markdown image alt text and URL without HTML escaping. Authenticated users can embed HTML in the alt text …