Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 11 Nov 2026 00:57:31 +0000 CVE-2026-124492 — SunEditor before 3.4.0 Stored XSS via Link Modal Bookmark List https://db.gcve.eu/vuln/cve-2026-124492 <p><strong>Affected:</strong> JiHong88 suneditor</p> <p>SunEditor before 3.4.0 contains a stored cross-site scripting vulnerability in ModalAnchorEditor&#39;s #createBookmarkList, which inserts entity-decoded h1-h6 header textContent into the bookmark list via innerHTML without escaping. Attackers can store HTML-encoded payloads in editor headers that execute JavaScript when a victim opens the link modal and types # in the URL input.</p> <p><strong>Affected:</strong> JiHong88 suneditor</p> <p>SunEditor before 3.4.0 contains a stored cross-site scripting vulnerability in ModalAnchorEditor&#39;s #createBookmarkList, which inserts entity-decoded h1-h6 header textContent into the bookmark list via innerHTML without escaping. Attackers can store HTML-encoded payloads in editor headers that execute JavaScript when a victim opens the link modal and types # in the URL input.</p> https://db.gcve.eu/vuln/cve-2026-124492