{"vulnerability": "CVE-2026-48788", "sightings": [{"uuid": "76379a7c-b178-444f-916c-88c99e1efd93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2026-48788", "type": "seen", "source": "https://gist.github.com/alon710/89044faa74c1d9de479703a9098fa939", "content": "", "creation_timestamp": "2026-06-26T19:42:06.282996Z"}, {"uuid": "e0032036-4f3b-4bda-8ae2-e0cc2dc19c40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2026-48788", "type": "published-proof-of-concept", "source": "https://github.com/umputun/remark42/security/advisories/GHSA-4c8j-mgm4-qqvp", "content": "", "creation_timestamp": "2026-06-26T20:35:05.391662Z"}, {"uuid": "38fa3e06-7edd-427c-a026-4db2c573c100", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2026-48788", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mogyvk4rbf2f", "content": "CVE-2026-48788 - Remark42: Cross-Site Scripting (XSS) on /api/v1/img via content-type spoofing\nCVE ID : CVE-2026-48788\n \n Published : June 16, 2026, 10:29 p.m. | 1\u00a0hour, 3\u00a0minutes ago\n \n Description : Remark42 is a self-hosted comment engine for blogs, articles, or any other p...", "creation_timestamp": "2026-06-16T23:58:10.425749Z"}]}