Veille CVE

Octobre 2026

2 CVE

  1. CVE-2026-66483 9.8 Critique

    ThemeREX Education Center

    Unauthenticated PHP Object Injection in Education Center <= 3.6.12 versions.

  2. CVE-2026-94063 7.1 Élevée

    ThemeREX Education Center

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeREX Education Center education allows Reflected XSS.This issue affects Education Center: from n/a through 3.6.12.