GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration
← All credits

Beatriz Fresno Naumova

12 vulnerability records and advisories credit this contributor.

CVE-2026-7435
SSCMS v7.4.0 SQL Injection via stl:sqlContent queryString
CVE-2026-7429
SSCMS v7.4.0 Reflected Cross-Site Scripting via STL Processing
CVE-2025-71177
LavaLite CMS <= 10.1.0 Stored XSS via Package Creation and Search
CVE-2025-71166
Typesetter CMS Reflected XSS via Move Message Handling
CVE-2025-71165
Typesetter CMS Reflected XSS via Status.php
CVE-2025-71164
Typesetter CMS Reflected XSS via Editing.php
CVE-2026-27742
Bludit <= 3.16.2 Stored XSS in Post Content
CVE-2026-27741
Bludit <= 3.16.1 CSRF in Plugin and Theme Management Endpoints
CVE-2026-26351
GetSimpleCMS-CE < 3.3.22 Stored XSS via components.php
CVE-2026-22186
Bio-Formats <= 8.3.0 XXE in Leica XLEF Metadata Parser