CVE-2026-26028 : Detail

CVE-2026-26028

6.1
/
Sedang
0.03%V4
2026-05-20
20h16 +00:00
Cross-site Scripting
A03-Injection
Network
2026-07-23
12h10 +00:00
CVE.org
NVD
Notifikasi untuk CVE tertentu
Tetap terinformasi tentang perubahan untuk CVE tertentu.
Kelola notifikasi

Deskripsi CVE

CryptPad is an end-to-end encrypted collaborative office suite. In versions prior to 2026.2.0, the HTML sanitizer in Diffmarked.js can be bypassed due to incomplete attribute filtering on restricted tags. The sanitizer validates only the src attribute of