CVE-2026-44366

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.1, a Stored Cross-Site Scripting (XSS) vulnerability exists in the Vvveb CMS comment submission flow. The author field is submitted by an unauthenticated user on any public post page, stored without sanitization, and later rendered unsanitized in two distinct sinks: This vulnerability is fixed in 1.0.8.1.

• CWE-79

• https://github.com/givanz/Vvveb/security/advisories/GHSA-gpmg-pcxr-9wvf
• https://github.com/givanz/Vvveb/security/advisories/GHSA-gpmg-pcxr-9wvf

Published

May 15, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-44359Meshtastic is an open source mesh networking solution. Prior…10
• CVE-2026-4436A low-privileged remote attacker can send Modbus packets to …8.6
• CVE-2026-44362OP-TEE is a Trusted Execution Environment (TEE) designed as …5.5
• CVE-2026-44363MISP modules are autonomous modules that can be used to exte…5.8
• CVE-2026-44364MISP modules are autonomous modules that can be used to exte…9.3
• CVE-2026-44365Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2026-44367Klaw is a self-service Apache Kafka Topic Management/Governa…2.7
• CVE-2026-44368PyQuorum is a cryptographic library for secret sharing and k…6.9
• CVE-2026-44369CVAT is an open source interactive video and image annotatio…8.5
• CVE-2026-4437Calling gethostbyaddr or gethostbyaddr_r with a configured n…7.5
• CVE-2026-44371Open OnDemand is an open-source high-performance computing p…5.3
• CVE-2026-44372Nitro is a next generation server toolkit. Prior to 3.0.2604…6.1