https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-03T05:27:56.591207+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-120443 CVE-2026-120443 — GoFound through 1.4.1 Stored XSS via Admin Dashboard Search Results 2026-11-03T05:27:56.592109+00:00

Affected: sea-team GoFound

GoFound through 1.4.1 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts by submitting document text to /api/index. Attackers can index malicious HTML that searcher/engine.go returns unescaped and dashboard.vue renders with v-html, executing script in an administrator's browser when an admin search matches the document.