CVE-2026-48118
1 advisory.
Packagist/nukeviet/nukeviet CVE-2026-48118: high 8.2
NukeViet: Unauthenticated Reflected XSS in Comment Module
Action: Upgrade nukeviet/nukeviet to 4.6.00 or later.
composer require nukeviet/nukeviet:4.6.00Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.6.00 | - |
Fixed versions
| 4.6.00 |
Sources
- osv: GHSA-mxpf-qgg6-v3ff
- https://github.com/nukeviet/nukeviet/security/advisories/GHSA-mxpf-qgg6-v3ff
- https://github.com/nukeviet/nukeviet
CVE-2026-48118 · published · modified · JSON