tocsin

CVE-2026-48118

1 advisory.

Packagist/nukeviet/nukeviet CVE-2026-48118: high 8.2

NukeViet: Unauthenticated Reflected XSS in Comment Module

Action: Upgrade nukeviet/nukeviet to 4.6.00 or later.

composer require nukeviet/nukeviet:4.6.00

Affected

introducedfixedlast affected
04.6.00-

Fixed versions

4.6.00

Sources

CVE-2026-48118 · published · modified · JSON