p PatchFirst

CVE-2026-32774

CVE-2026-32774 · Vulnogram - Stored Cross-Site Scripting via Comment Hypertext

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Vulnogram 1.0.0 contains a stored cross-site scripting vulnerability in comment hypertext handling that allows attackers to inject malicious scripts. Remote attackers can inject XSS payloads through comments to execute arbitrary JavaScript in victims' browsers.

CVSS 5.3 · Medium · EPSS 0.3%

Published
Updated

Stack: node

Affected products and versions

  • vulnogram

    Versions
    • 1.0.0: Affected

    No fix published

  • vulnogram npm

    Affected ranges
    • SEMVER: ≤ 1.0.0

    No fix published

Original sources

Check your server →