Webmention
Pfefferle · 3 CVEs
CVE-2026-10513
HIGH
Webmention <= 5.8.0 - Unauthenticated Stored Cross-Site Scripting via MF2 'photo'/'url' Author Properties
Jun 30, 2026
CVE-2026-0686
HIGH
Webmention <= 5.6.2 - Unauthenticated Blind Server-Side Request Forgery
Apr 2, 2026
CVE-2026-0688
MEDIUM
Webmention <= 5.6.2 - Authenticated (Subscriber+) Server-Side Request Forgery
Apr 2, 2026
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-10513 | Webmention <= 5.8.0 - Unauthenticated Stored Cross-Site Scripting via MF2 'photo'/'url' Author Properties | HIGH | 0.40% | Jun 30, 2026 |
| CVE-2026-0686 | Webmention <= 5.6.2 - Unauthenticated Blind Server-Side Request Forgery | HIGH | 0.30% | Apr 2, 2026 |
| CVE-2026-0688 | Webmention <= 5.6.2 - Authenticated (Subscriber+) Server-Side Request Forgery | MEDIUM | 0.20% | Apr 2, 2026 |
Showing 1 to 3 of 3 CVEs