CVE-2026-104394

Unauthenticated Cross Site Scripting (XSS) in Charitable <= 1.8.12.3 versions.

  • Published Oct 6, 2026
  • CVSS 7.1 high

Affected software

CVE-2026-104394 at the National Vulnerability Database