https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 31 Oct 2026 19:12:35 +0000 https://db.gcve.eu/vuln/cve-2026-119680 <p><strong>Affected:</strong> ManageEngine SharePoint Manager Plus</p> <p>A stored cross-site scripting (XSS) vulnerability exists in the chart feature of SharePoint Manager Plus (SPMP) due to improper sanitization and HTML encoding of user-controlled data. An attacker can inject malicious HTML or JavaScript into attributes used to generate charts, including users&#39; full names, site names, or group names. The injected content is stored and subsequently executed in the context of other users&#39; browsers when the affected charts are rendered. This vulnerability was fixed in client application build 4508.</p> <p><strong>Affected:</strong> ManageEngine SharePoint Manager Plus</p> <p>A stored cross-site scripting (XSS) vulnerability exists in the chart feature of SharePoint Manager Plus (SPMP) due to improper sanitization and HTML encoding of user-controlled data. An attacker can inject malicious HTML or JavaScript into attributes used to generate charts, including users&#39; full names, site names, or group names. The injected content is stored and subsequently executed in the context of other users&#39; browsers when the affected charts are rendered. This vulnerability was fixed in client application build 4508.</p> https://db.gcve.eu/vuln/cve-2026-119680