← Back to CVE search

CVE-2026-38936

diskover-community

Description

A reflected cross-site scripting (XSS) vulnerability exists in diskover-community <= 2.3.5 in public/selectindices.php via the namecontains parameter

CVSS 6.1EPSS 0.194%Risk 0.62
View source
Published
2026-04-27 17:16:43
Affected versions
<2.3.5
Type
Installed app
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N