https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 14 Nov 2026 20:29:42 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-64670 <p>Waline is a comment system with backend support. In versions 3.15.2 and prior, @waline/client renders the comment editor&#39;s live preview with marked and no sanitizer (utils/markdown.ts), and the preview is injected with v-html. When a comment is edited, the editor is seeded with the comment&#39;s raw, un-sanitized body (orig). Only administrators and the comment owner can edit. So an administrator who clicks Edit on an attacker&#39;s comment renders that attacker&#39;s raw HTML in their own session: an unauthenticated commenter achieves privilege-escalation stored XSS against a moderator with a single Edit click. At time of publication, there are no publicly available patches.</p> <p>Waline is a comment system with backend support. In versions 3.15.2 and prior, @waline/client renders the comment editor&#39;s live preview with marked and no sanitizer (utils/markdown.ts), and the preview is injected with v-html. When a comment is edited, the editor is seeded with the comment&#39;s raw, un-sanitized body (orig). Only administrators and the comment owner can edit. So an administrator who clicks Edit on an attacker&#39;s comment renders that attacker&#39;s raw HTML in their own session: an unauthenticated commenter achieves privilege-escalation stored XSS against a moderator with a single Edit click. At time of publication, there are no publicly available patches.</p> https://db.gcve.eu/vuln/fkie_cve-2026-64670