Veille CVE

Vendredi 23 octobre 2026

2 CVE

  1. CVE-2026-112838 7.1 Élevée

    e4jvikwp VikRentCar

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp VikRentCar vikrentcar allows Stored XSS.This issue affects VikRentCar: from n/a through 1.4.8.

  2. CVE-2026-112835 7.1 Élevée

    e4jvikwp VikRentCar

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp VikRentCar vikrentcar allows Reflected XSS.This issue affects VikRentCar: from n/a through 1.4.8.