Silverpeas Core has a reflected cross-site scripting vulnerability

Description

References

• nvd.nist.gov/vuln/detail/CVE-2026-30139 · ADVISORY
• Silverpeas/Silverpeas-Core#1421 · WEB
• Silverpeas/Silverpeas-Core commit 7b4bacc · WEB
• Silverpeas/Silverpeas-Core · PACKAGE
• bodd1593/CVEs-huyle · WEB

org.silverpeas.core:silverpeas-core-war의 다른 취약점

• CVE-2026-53698보통 6.5Silverpeas through 6.4.6 mishandles the "Personal space" feature that is selected when no componentId is set.
• CVE-2023-47324보통 5.4Silverpeas Core 6.3.1 is vulnerable to Cross Site Scripting (XSS) via the message/notification feature.
• CVE-2023-47320높음 8.1Silverpeas Core 6.3.1 is vulnerable to Incorrect Access Control. An attacker with low privileges is able to execute the administrator-only f…