Signals
Back to database
Soon71High7.1VulnerabilityCVE-2026-40804No patch link observed

CVE-2026-40804 — Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kodezen LLC aBlocks ablocks allows Reflected …

Published Oct 8, 2026, 07:17 PM UTCIngested 3h agoSource NVD(cve-db)CVE-2026-40804

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kodezen LLC aBlocks ablocks allows Reflected XSS.This issue affects aBlocks: from n/a through 2.16.0.

CVSS v3.1 base metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
7.1

High severity

Band computed from the CVSS base score, not the source's own label — so it means the same thing across every feed.

AV

Network

Attack Vector

AC

Low

Attack Complexity

PR

None

Privileges Required

UI

Required

User Interaction

S

Changed

Scope

C

Low

Confidentiality

I

Low

Integrity

A

Low

Availability

References

Related threats

same CWE or vendor
Critical

CVE-2026-84244 — IBM Guardium Data Protection 12.2 IBM Security Guardium Data Protection is vulnerable to stored cross-site scripting (XSS) in the Quick Search resu…

CVE-2026-84244 · 2h ago

Medium

CVE-2026-107393 — FreeScout is a self-hosted help desk and shared mailbox.

CVE-2026-107393 · 2h ago

Medium

CVE-2026-107380 — savg-sanitizer is a PHP SVG/XML sanitizer.

CVE-2026-107380 · 4h ago

High

CVE-2026-107303 — JHipster is a development platform to quickly generate, develop, and deploy modern web applications and microservice architectures.

CVE-2026-107303 · 4h ago

High

CVE-2026-104078 — Obsidian Desktop before 1.14.0 contains a filter bypass vulnerability in the bundled MathJax 3.2.2 Safe component that allows attackers to execute …

CVE-2026-104078 · 5h ago

High

CVE-2026-104077 — Obsidian Desktop before 1.14.0 contains a remote code execution vulnerability that allows attackers to craft malicious Markdown notes exploiting in…

CVE-2026-104077 · 5h ago