← All credits

doanmanhducz

5 vulnerability records and advisories credit this contributor.

CVE-2026-109307

Craft CMS 5.0.0 before 5.10.14 DOM XSS via returnUrl in 2FA Verification

CVE-2026-103283

Ghost 6.20.0 before 6.57.1 Authentication Bypass via Session Handling

CVE-2026-104411

Ghost 6.22.1 before 6.64.0 Stored XSS via Local Storage File Uploads

CVE-2026-103267

Ghost 0.5.0 before 6.62.0 Arbitrary Email Registration via Staff Invite

CVE-2026-103284

Ghost 5.125.1 before 6.57.1 Information Disclosure via Feedback