https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 26 Oct 2026 18:33:28 +0000 https://db.gcve.eu/vuln/cve-2026-64944 <p><strong>Affected:</strong> Apache Software Foundation Apache Answer</p> <p>Improper Neutralization of Input During Web Page Generation (&#39;Cross-site Scripting&#39;) vulnerability in Apache Answer.</p> <p>This issue affects Apache Answer: through 2.0.2.</p> <p>The importer stores imported question bodies as raw HTML without passing them through the normal Markdown-to-HTML sanitization path, so attacker-controlled HTML embedded in an imported data source is persisted and rendered to all viewers (including privileged users) as stored XSS.</p> <p>Users are recommended to upgrade to version 2.0.3, which fixes the issue.</p> <p><strong>Affected:</strong> Apache Software Foundation Apache Answer</p> <p>Improper Neutralization of Input During Web Page Generation (&#39;Cross-site Scripting&#39;) vulnerability in Apache Answer.</p> <p>This issue affects Apache Answer: through 2.0.2.</p> <p>The importer stores imported question bodies as raw HTML without passing them through the normal Markdown-to-HTML sanitization path, so attacker-controlled HTML embedded in an imported data source is persisted and rendered to all viewers (including privileged users) as stored XSS.</p> <p>Users are recommended to upgrade to version 2.0.3, which fixes the issue.</p> https://db.gcve.eu/vuln/cve-2026-64944