{"id":"EUVD-2026-12188","enisaUuid":"618d0681-b383-3510-991f-1cf40e399d13","description":"Vulnogram 1.0.0 contains a stored cross-site scripting vulnerability in comment hypertext handling that allows attackers to inject malicious scripts. Remote attackers can inject XSS payloads through comments to execute arbitrary JavaScript in victims\u0027 browsers.","datePublished":"Mar 14, 2026, 9:44:07 PM","dateUpdated":"Nov 8, 2026, 2:01:57 PM","baseScore":5.3,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N","references":"https://github.com/Vulnogram/Vulnogram/security/advisories/GHSA-pg4p-2985-gvxr\nhttps://github.com/Vulnogram/Vulnogram\nhttps://www.vulncheck.com/advisories/vulnogram-stored-cross-site-scripting-via-comment-hypertext\n","aliases":"CVE-2026-32774\n","assigner":"VulnCheck","epss":0.29,"enisaIdProduct":[{"id":"51b7cd4e-f7d1-3515-9400-daa1ef64b134","product":{"name":"Vulnogram","vendor":{"name":"Vulnogram"}},"product_version":"1.0.0"}],"enisaIdVendor":[{"id":"e0befb1c-f797-353c-b3a9-6129a2efb831","vendor":{"name":"Vulnogram"}}],"enisaIdVulnerability":[{"id":"ccefc424-66f8-3c92-9df5-772d212ff025","vulnerability":{"id":"CVE-2026-32774","description":"Vulnogram 1.0.0 contains a stored cross-site scripting vulnerability in comment hypertext handling that allows attackers to inject malicious scripts. Remote attackers can inject XSS payloads through comments to execute arbitrary JavaScript in victims\u0027 browsers.","datePublished":"Mar 14, 2026, 9:44:07 PM","dateUpdated":"Nov 8, 2026, 2:01:57 PM","status":"PUBLISHED","baseScore":5.3,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N","references":"https://github.com/Vulnogram/Vulnogram/security/advisories/GHSA-pg4p-2985-gvxr\nhttps://github.com/Vulnogram/Vulnogram\nhttps://www.vulncheck.com/advisories/vulnogram-stored-cross-site-scripting-via-comment-hypertext\n","enisa_id":"EUVD-2026-12188\n","assigner":"VulnCheck","epss":0.29,"dataProcessed":"Nov 9, 2026, 10:00:21 AM","vulnerabilityProduct":[{"id":"163e33d0-27fe-3108-8b2e-0f8cf9f3ae00","product":{"name":"Vulnogram","vendor":{"name":"Vulnogram"}},"product_version":"1.0.0"}],"vulnerabilityVendor":[{"id":"45010c33-1216-3e27-8786-f676eb16a962","vendor":{"name":"Vulnogram"}}]}}],"enisaIdAdvisory":[]}