WordPress Meow Gallery Plugin <= 5.1.3 is vulnerable to Cross Site Scripting (XSS)<\/p>
Software: Meow Gallery<\/p>
Link: https:\/\/wordpress.org\/plugins\/meow-gallery\/#developers<\/p>
Affected Version <= 5.1.3<\/p>
Fixed in version 5.1.4 <\/p>","date":"2024-05-09"}],"impact":{"cvss":{"version":"3.1","vector":"CVSS:3.1\/AV:N\/AC:L\/PR:L\/UI:N\/S:C\/C:L\/I:L\/A:N","av":"n","ac":"l","pr":"l","ui":"n","s":"c","c":"l","i":"l","a":"n","score":"6.4","severity":"m","exploitable":"3.1","impact":"2.7"},"cvss3":{"version":"3.1","vector":"CVSS:3.1\/AV:N\/AC:L\/PR:L\/UI:N\/S:C\/C:L\/I:L\/A:N","score":"6.4","severity":"medium","av":"network","ac":"low","pr":"low","ui":"none","s":"changed","c":"low","i":"low","a":"none","exploitable":"3.1","impact":"2.7"},"cwe":[{"cwe":"CWE-79","name":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","description":"The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users."}],"ssvc":{"exploitation":"none","automatable":"no","technical_impact":"partial","kev":false,"kev_date":null}}},{"uuid":"3d4e3d455afa61b39a5905e40b7cfb3c818955bfb83e8e079df64b889c1f6a70","name":"Meow Gallery [meow-gallery] < 5.2.8","description":null,"operator":{"min_version":null,"min_operator":null,"max_version":"5.2.8","max_operator":"lt","unfixed":"0","closed":"0"},"source":[{"id":"CVE-2025-47449","name":"CVE-2025-47449","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2025-47449","description":"[en] Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jordy Meow Meow Gallery meow-gallery allows Stored XSS.This issue affects Meow Gallery: from n\/a through <= 5.2.7.","date":"2025-05-07"},{"id":"EUVD-2025-13862","name":"EUVD-2025-13862","link":"https:\/\/euvd.enisa.europa.eu\/enisa\/EUVD-2025-13862","description":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jordy Meow Meow Gallery allows Stored XSS. This issue affects Meow Gallery: from n\/a through 5.2.7.","date":"2025-05-07"},{"id":"dfbed80e3ee3151f6dc7c1571ebbd5804679ab37","name":"WordPress Meow Gallery Plugin <= 5.2.7 is vulnerable to Cross Site Scripting (XSS)","link":"https:\/\/patchstack.com\/database\/wordpress\/plugin\/meow-gallery\/vulnerability\/wordpress-meow-gallery-5-2-7-cross-site-scripting-xss-vulnerability","description":"
WordPress Meow Gallery Plugin <= 5.2.7 is vulnerable to Cross Site Scripting (XSS)<\/p>
Software: Meow Gallery<\/p>
Fixed in version 5.2.8 <\/p>
Affected Version <= 5.2.7<\/p>
CVE: CVE-2025-47449<\/p>","date":"2025-05-07"},{"id":"11109b0d4268f142bae4ee6cc2cdcaddeee01eb6","name":"Meow Gallery <= 5.2.7 - Authenticated (Author+) Stored Cross-Site Scripting","link":"https:\/\/www.wordfence.com\/threat-intel\/vulnerabilities\/wordpress-plugins\/meow-gallery\/meow-gallery-527-authenticated-author-stored-cross-site-scripting","description":"The Meow Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 5.2.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.","date":"2025-05-07"}],"impact":{"cvss":{"version":"3.1","vector":"CVSS:3.1\/AV:N\/AC:L\/PR:H\/UI:R\/S:C\/C:L\/I:L\/A:L","av":"n","ac":"l","pr":"h","ui":"r","s":"c","c":"l","i":"l","a":"l","score":"5.9","severity":"m","exploitable":"0.0","impact":"0.0"},"cvss3":{"version":"3.1","vector":"CVSS:3.1\/AV:N\/AC:L\/PR:H\/UI:R\/S:C\/C:L\/I:L\/A:L","score":"5.9","severity":"medium","av":"network","ac":"low","pr":"high","ui":"required","s":"changed","c":"low","i":"low","a":"low","exploitable":"0.0","impact":"0.0"},"cwe":[{"cwe":"CWE-79","name":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","description":"The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users."}],"ssvc":{"exploitation":"none","automatable":"no","technical_impact":"partial","kev":false,"kev_date":null},"epss":"0.001"}},{"uuid":"00f383374bbf94dd1a183a04f4f3a43a500c7b47003a2b26517408ea899ee38c","name":"Meow Gallery [meow-gallery] < 5.4.5","description":null,"operator":{"min_version":null,"min_operator":null,"max_version":"5.4.5","max_operator":"lt","unfixed":"0","closed":"0"},"source":[{"id":"CVE-2026-32418","name":"CVE-2026-32418","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-32418","description":"[en] Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Jordy Meow Meow Gallery meow-gallery allows Blind SQL Injection.This issue affects Meow Gallery: from n\/a through <= 5.4.4.","date":"2026-03-13"},{"id":"ec306ffb17bec289e34dcfad1dc0065dcae6ad22","name":"Meow Gallery <= 5.4.4 - Authenticated (Author+) SQL Injection","link":"https:\/\/www.wordfence.com\/threat-intel\/vulnerabilities\/wordpress-plugins\/meow-gallery\/meow-gallery-544-authenticated-author-sql-injection","description":"The Meow Gallery plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 5.4.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with author-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.","date":"2026-02-26"}],"impact":{"cvss":{"version":"3.1","vector":"CVSS:3.1\/AV:N\/AC:L\/PR:H\/UI:N\/S:C\/C:H\/I:N\/A:L","av":"n","ac":"l","pr":"h","ui":"n","s":"c","c":"h","i":"n","a":"l","score":"7.6","severity":"h","exploitable":"2.3","impact":"4.7"},"cvss3":{"version":"3.1","vector":"CVSS:3.1\/AV:N\/AC:L\/PR:H\/UI:N\/S:C\/C:H\/I:N\/A:L","score":"7.6","severity":"high","av":"network","ac":"low","pr":"high","ui":"none","s":"changed","c":"high","i":"none","a":"low","exploitable":"2.3","impact":"4.7"},"cwe":[{"cwe":"CWE-89","name":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')","description":"The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data."}],"ssvc":{"exploitation":"none","automatable":"no","technical_impact":"partial","kev":false,"kev_date":null}}},{"uuid":"de0860c302eefad11036d559bab09e07a245bef303ce4ac285045bbedc2658fc","name":"Meow Gallery [meow-gallery] < 5.4.5","description":null,"operator":{"min_version":null,"min_operator":null,"max_version":"5.4.5","max_operator":"lt","unfixed":"0","closed":"0"},"source":[{"id":"CVE-2026-1291","name":"CVE-2026-1291","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-1291","description":"[en] The Meow Gallery plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the REST API endpoint \/wp-json\/meow-gallery\/v1\/save_shortcode in all versions up to, and including, 5.4.4 This makes it possible for authenticated attackers, with Author-level access and above, to arbitrarily create or overwrite existing gallery shortcode records by supplying a user-controlled id value. The endpoint performs database update operations without verifying that the requesting user is authorized to modify the referenced gallery record or create their own.","date":"2026-06-13"},{"id":"69966fbc67090043a44926b704ec47bfb1d9a13f","name":"Meow Gallery <= 5.4.4 - Missing Authorization to Authenticated (Author+) Shortcode creation","link":"https:\/\/www.wordfence.com\/threat-intel\/vulnerabilities\/wordpress-plugins\/meow-gallery\/meow-gallery-544-missing-authorization-to-authenticated-author-shortcode-creation","description":"The Meow Gallery plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the REST API endpoint \/wp-json\/meow-gallery\/v1\/save_shortcode in all versions up to, and including, 5.4.4 This makes it possible for authenticated attackers, with Author-level access and above, to arbitrarily create or overwrite existing gallery shortcode records by supplying a user-controlled id value. The endpoint performs database update operations without verifying that the requesting user is authorized to modify the referenced gallery record or create their own.","date":"2026-06-12"},{"id":"EUVD-2026-36649","name":"EUVD-2026-36649","link":"https:\/\/euvd.enisa.europa.eu\/enisa\/EUVD-2026-36649","description":"The Meow Gallery plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the REST API endpoint \/wp-json\/meow-gallery\/v1\/save_shortcode in all versions up to, and including, 5.4.4 This makes it possible for authenticated attackers, with Author-level access and above, to arbitrarily create or overwrite existing gallery shortcode records by supplying a user-controlled id value. The endpoint performs database update operations without verifying that the requesting user is authorized to modify the referenced gallery record or create their own.","date":"2026-06-13"}],"impact":{"cvss":{"version":"3.1","vector":"CVSS:3.1\/AV:N\/AC:L\/PR:L\/UI:N\/S:U\/C:N\/I:L\/A:N","av":"n","ac":"l","pr":"l","ui":"n","s":"u","c":"n","i":"l","a":"n","score":"4.3","severity":"m","exploitable":"0.0","impact":"0.0"},"cvss3":{"version":"3.1","vector":"CVSS:3.1\/AV:N\/AC:L\/PR:L\/UI:N\/S:U\/C:N\/I:L\/A:N","score":"4.3","severity":"medium","av":"network","ac":"low","pr":"low","ui":"none","s":"unchanged","c":"none","i":"low","a":"none","exploitable":"0.0","impact":"0.0"},"cwe":[{"cwe":"CWE-639","name":"Authorization Bypass Through User-Controlled Key","description":"The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data."}],"ssvc":{"exploitation":"none","automatable":"no","technical_impact":"partial","kev":false,"kev_date":null}}},{"uuid":"641f7cd062abb7b3af019c35b96e33737d96aeb1315ccae06b41107fa82eed43","name":"Meow Gallery [meow-gallery] < 5.5.2","description":null,"operator":{"min_version":null,"min_operator":null,"max_version":"5.5.2","max_operator":"lt","unfixed":"0","closed":"0"},"source":[{"id":"CVE-2026-15386","name":"CVE-2026-15386","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-15386","description":"[en] The Meow Gallery WordPress plugin before 5.5.2 does not escape an attachment's alt text before outputting it into an attribute of the link it builds for linked galleries, allowing users with the Author role or above to store a JavaScript payload that executes in the browser of any visitor (including administrators) who views a post containing such a gallery.","date":"2026-08-07"},{"id":"85fa8a9034cb7f87fbc5ac1201a16b001f13361d","name":"Meow Gallery <= 5.5.1 - Authenticated (Author+) Stored Cross-Site Scripting","link":"https:\/\/www.wordfence.com\/threat-intel\/vulnerabilities\/wordpress-plugins\/meow-gallery\/meow-gallery-551-authenticated-author-stored-cross-site-scripting","description":"The Meow Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 5.5.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.","date":"2026-08-03"}],"impact":{"cwe":[{"cwe":"CWE-79","name":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","description":"The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users."}],"ssvc":{"exploitation":"poc","automatable":"no","technical_impact":"partial","kev":false,"kev_date":null}}},{"uuid":"80e5a22503527f8efd3c0a34e975c4e9661b820826213574499531844307d645","name":"Meow Gallery [meow-gallery] < 5.5.5","description":null,"operator":{"min_version":null,"min_operator":null,"max_version":"5.5.5","max_operator":"lt","unfixed":"0","closed":"0"},"source":[{"id":"CVE-2026-92422","name":"CVE-2026-92422","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-92422","description":"[en] The Meow Gallery WordPress plugin before 5.5.5 does not properly sanitize a user-supplied value before concatenating it into a shortcode string that it passes to the WordPress shortcode parser on a publicly reachable endpoint, allowing unauthenticated users to execute arbitrary registered shortcodes and disclose non-public gallery content.","date":"2026-09-20"},{"id":"EUVD-2026-83675","name":"EUVD-2026-83675","link":"https:\/\/euvd.enisa.europa.eu\/enisa\/EUVD-2026-83675","description":"The Meow Gallery WordPress plugin before 5.5.5 does not properly sanitize a user-supplied value before concatenating it into a shortcode string that it passes to the WordPress shortcode parser on a publicly reachable endpoint, allowing unauthenticated users to execute arbitrary registered shortcodes and disclose non-public gallery content.","date":"2026-09-20"},{"id":"27c0f24886640bfc8a0807434f87dffc88fd8b70","name":"Meow Gallery <= 5.5.4 - Unauthenticated Arbitrary Shortcode Execution","link":"https:\/\/www.wordfence.com\/threat-intel\/vulnerabilities\/wordpress-plugins\/meow-gallery\/meow-gallery-554-unauthenticated-arbitrary-shortcode-execution","description":"The The Meow Gallery plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.5.4. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.","date":"2026-09-18"}],"impact":{"cwe":[{"cwe":"CWE-345","name":"Insufficient Verification of Data Authenticity","description":"The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data."}],"ssvc":{"exploitation":"none","automatable":"yes","technical_impact":"partial","kev":false,"kev_date":null},"cvss3":{"version":"3.1","vector":"CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:N\/S:U\/C:L\/I:L\/A:N","score":"6.5","severity":"medium","av":"network","ac":"low","pr":"none","ui":"none","s":"unchanged","c":"low","i":"low","a":"none","exploitable":null,"impact":null}}},{"uuid":"abe0e68ac5667c5ad6df6b1f8c741650ad251a66ea031eb408151e6367e00812","name":"Meow Gallery [meow-gallery] < 5.5.5","description":null,"operator":{"min_version":null,"min_operator":null,"max_version":"5.5.5","max_operator":"lt","unfixed":"0","closed":"0"},"source":[{"id":"CVE-2026-92423","name":"CVE-2026-92423","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-92423","description":"[en] The Meow Gallery WordPress plugin before 5.5.5 does not perform a proper capability check or restrict results to the requesting user's own posts before returning post data, allowing authenticated users with Author-level access and above to disclose the titles, authors, dates and statuses of other users' draft and private posts.","date":"2026-09-20"},{"id":"EUVD-2026-83676","name":"EUVD-2026-83676","link":"https:\/\/euvd.enisa.europa.eu\/enisa\/EUVD-2026-83676","description":"The Meow Gallery WordPress plugin before 5.5.5 does not perform a proper capability check or restrict results to the requesting user's own posts before returning post data, allowing authenticated users with Author-level access and above to disclose the titles, authors, dates and statuses of other users' draft and private posts.","date":"2026-09-20"},{"id":"1a0a7a05044b2501ad6f04831d96fec8bb19e406","name":"Meow Gallery <= 5.5.4 - Authenticated (Author+) Information Exposure","link":"https:\/\/www.wordfence.com\/threat-intel\/vulnerabilities\/wordpress-plugins\/meow-gallery\/meow-gallery-554-authenticated-author-information-exposure","description":"The Meow Gallery plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.5.4. This makes it possible for authenticated attackers, with author-level access and above, to extract sensitive user or configuration data.","date":"2026-09-18"}],"impact":{"cwe":[{"cwe":"CWE-200","name":"Exposure of Sensitive Information to an Unauthorized Actor","description":"The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information."}],"ssvc":{"exploitation":"none","automatable":"no","technical_impact":"partial","kev":false,"kev_date":null},"cvss3":{"version":"3.1","vector":"CVSS:3.1\/AV:N\/AC:L\/PR:H\/UI:N\/S:U\/C:L\/I:N\/A:N","score":"2.7","severity":"low","av":"network","ac":"low","pr":"high","ui":"none","s":"unchanged","c":"low","i":"none","a":"none","exploitable":null,"impact":null}}},{"uuid":"a9542db06f3fa9ea302cbae8e2bb48ad9eefc0c98e30a76064d78f6217d71fd3","name":"Meow Gallery [meow-gallery] < 5.5.5","description":null,"operator":{"min_version":null,"min_operator":null,"max_version":"5.5.5","max_operator":"lt","unfixed":"0","closed":"0"},"source":[{"id":"CVE-2026-13747","name":"CVE-2026-13747","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-13747","description":"[en] The Meow Gallery plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.5.4 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with author-level access and above, to enumerate and read metadata \u2014 including post ID, title, date, author, and status \u2014 of all private and draft posts on the site, including those authored by other users.","date":"2026-10-30"},{"id":"fa1471f8ed2886d0a34a7e7ffeeb934a987ebe84","name":"Meow Gallery <= 5.5.4 - Missing Authorization to Authenticated (Author+) Information Disclosure via fetch_posts REST Endpoint","link":"https:\/\/www.wordfence.com\/threat-intel\/vulnerabilities\/wordpress-plugins\/meow-gallery\/meow-gallery-554-missing-authorization-to-authenticated-author-information-disclosure-via-fetch-posts-rest-endpoint","description":"The Meow Gallery plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.5.4 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with author-level access and above, to enumerate and read metadata \u2014 including post ID, title, date, author, and status \u2014 of all private and draft posts on the site, including those authored by other users.","date":"2026-10-30"}],"impact":{"cvss":{"version":"3.1","vector":"CVSS:3.1\/AV:N\/AC:L\/PR:L\/UI:N\/S:U\/C:H\/I:N\/A:N","av":"n","ac":"l","pr":"l","ui":"n","s":"u","c":"h","i":"n","a":"n","score":"6.5","severity":"m","exploitable":"0.0","impact":"0.0"},"cvss3":{"version":"3.1","vector":"CVSS:3.1\/AV:N\/AC:L\/PR:L\/UI:N\/S:U\/C:H\/I:N\/A:N","score":"6.5","severity":"medium","av":"network","ac":"low","pr":"low","ui":"none","s":"unchanged","c":"high","i":"none","a":"none","exploitable":"0.0","impact":"0.0"},"cwe":[{"cwe":"CWE-862","name":"Missing Authorization","description":"The product does not perform an authorization check when an actor attempts to access a resource or perform an action."}],"ssvc":{"exploitation":"none","automatable":"no","technical_impact":"partial","kev":false,"kev_date":null}}},{"uuid":"30e5e347946f1b7bea6657a1d7e3c3083abeaf8be57c55e85c038f71bbc6cdfb","name":"Meow Gallery [meow-gallery] < 5.5.2","description":null,"operator":{"min_version":null,"min_operator":null,"max_version":"5.5.2","max_operator":"lt","unfixed":"0","closed":"0"},"source":[{"id":"CVE-2026-9239","name":"CVE-2026-9239","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-9239","description":"[en] The Meow Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Attachment Alt Text (aria-label attribute) in all versions up to, and including, 5.5.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The vulnerable code path is only reachable when a gallery item is rendered as a link (i.e., link_href is non-empty), and exploitation relies on the fact that WordPress's sanitize_text_field() strips angle-bracketed tags but preserves double quotes, allowing an attacker to break out of the aria-label attribute context and inject event-handler attributes such as onclick.","date":"2026-10-30"},{"id":"eb80a9bb97cf1f7f055cfcbce0c9b51e5aeedd2d","name":"Meow Gallery <= 5.5.1 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment Alt Text (aria-label attribute)","link":"https:\/\/www.wordfence.com\/threat-intel\/vulnerabilities\/wordpress-plugins\/meow-gallery\/meow-gallery-551-authenticated-author-stored-cross-site-scripting-via-attachment-alt-text-aria-label-attribute","description":"The Meow Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Attachment Alt Text (aria-label attribute) in all versions up to, and including, 5.5.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The vulnerable code path is only reachable when a gallery item is rendered as a link (i.e., link_href is non-empty), and exploitation relies on the fact that WordPress's sanitize_text_field() strips angle-bracketed tags but preserves double quotes, allowing an attacker to break out of the aria-label attribute context and inject event-handler attributes such as onclick.","date":"2026-10-30"}],"impact":{"cvss":{"version":"3.1","vector":"CVSS:3.1\/AV:N\/AC:L\/PR:L\/UI:N\/S:C\/C:L\/I:L\/A:N","av":"n","ac":"l","pr":"l","ui":"n","s":"c","c":"l","i":"l","a":"n","score":"6.4","severity":"m","exploitable":"0.0","impact":"0.0"},"cvss3":{"version":"3.1","vector":"CVSS:3.1\/AV:N\/AC:L\/PR:L\/UI:N\/S:C\/C:L\/I:L\/A:N","score":"6.4","severity":"medium","av":"network","ac":"low","pr":"low","ui":"none","s":"changed","c":"low","i":"low","a":"none","exploitable":"0.0","impact":"0.0"},"cwe":[{"cwe":"CWE-79","name":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","description":"The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users."}],"ssvc":{"exploitation":"none","automatable":"no","technical_impact":"partial","kev":false,"kev_date":null}}}]},"updated":"1793429165"}