CVE-2026-19447Official record
FileOrbis
Stored XSS · CVSS 3.1: 5.4
- My contribution
- Discovery, notification and retesting
Research completed through vendor notification, remediation retesting and responsible disclosure.
Stored XSS · CVSS 3.1: 5.4
Unrestricted file upload → RCE · CVSS 3.1: 7.3
HTML injection and stored XSS · CVSS 3.1: 3.5