Known Vulnerabilities for Click by Palletsprojects
Listed below are 1 of the newest known vulnerabilities associated with "Click" by "Palletsprojects".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-124494 json | SunEditor before 3.4.0 contains a stored cross-site scripting vulnerability because the html.clean() sanitizer's _normalizeUR... | Not Provided | 2026-11-08 | 2026-11-10 |
| CVE-2026-123529 json | Vikunja before 2.7.1 contains a stored CSS injection vulnerability that allows authenticated users with project write access ... | Not Provided | 2026-11-08 | 2026-11-10 |
| CVE-2026-121516 json | The QODE Wishlist for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'qode_wishlist_fo... | Not Provided | 2026-11-07 | 2026-11-07 |
| CVE-2026-121447 json | svg-sanitizer before 1.1.0 contains a cross-site scripting vulnerability that allows attackers to bypass sanitization by plac... | Not Provided | 2026-11-03 | 2026-11-09 |
| CVE-2026-120512 json | The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Stored Cro... | Not Provided | 2026-11-07 | 2026-11-07 |
| CVE-2026-120328 json | The click tracking middleware does not validate the authentication code of a recipient if the code is omitted. Unauthenticate... | Not Provided | 2026-11-03 | 2026-11-03 |
| CVE-2026-120327 json | The click tracking middleware accepts an arbitrary target URL and redirects to it. Attackers can misuse links to the website ... | Not Provided | 2026-11-03 | 2026-11-03 |
| CVE-2026-119509 json | Missing Authorization vulnerability in eranfl ClickCease Click Fraud Protection clickcease-click-fraud-protection allows Expl... | Not Provided | 2026-11-03 | 2026-11-03 |
| CVE-2026-119446 json | Session Fixation vulnerability in the CLI login flow in nerves-hub nerves_hub_web allows an unauthenticated attacker to obtai... | Not Provided | 2026-11-10 | 2026-11-10 |
| CVE-2026-118692 json | CherryTree through 1.7.2 contains an OS command injection vulnerability in CtActions::link_clicked that allows attackers to e... | Not Provided | 2026-10-28 | 2026-11-03 |