Web-Security

Summary Field Value CVE ID CVE-2026-66001 Advisory GHSA-2ph8-x773-8p2x Vulnerability Type OAuth2 Consent Bypass / Cross-Site Request Forgery CWE CWE-352: Cross-Site Request Forgery Attack Vector Network CVSS v4.0 Base Score 8.5 (High) CVSS v4.0 Vector CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N Affected Versions Frappe < 15.114.0; 16.0.0-beta.1 through 16.25.x Patched Versions 15.114.0 and 16.26.0 Publicly Credited Reporters DerekHaber and Mohammed Alzahrani (mzalzahrani) Remediation Developer AarDG10 Executive Summary Frappe Framework contained an improper authorization weakness in its OAuth2 consent flow. In the attack path I validated, an unauthenticated attacker could register an OAuth client when Dynamic Client Registration was enabled, then direct a logged-in victim to the OAuth approval endpoint. The vulnerable endpoint could issue an authorization code and redirect it to the attacker’s registered callback without requiring the victim to complete the expected consent confirmation. ...

Summary Field Value CVE ID CVE-2026-33403 Advisory GHSA-7xqw-r9pr-qv59 Vulnerability Type Reflected DOM-based XSS / HTML Injection Attack Vector Network CVSS v3.1 Base Score 6.1 (Medium) CVSS v3.1 Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Affected Versions Pi-hole Web v6.0 through v6.4.1 Patched Version v6.5 Discovered By Mohammed Alzahrani, andrejtomci, n1rwhex Description Pi-hole Web versions 6.0 through 6.4.1 contain a reflected XSS / HTML injection vulnerability in scripts/js/taillog.js. The file query parameter is used in an error message that is inserted directly into the DOM via innerHTML without sanitization or escaping. ...