@stackflag.bsky.socialCVE-2026-103904 - jtl-shop
JTL-Shop stores consent names entered by anyone without checking them, and then shows those names on an admin page without protecting the content. A malicious user could place script…
Too many irrelevant or confusing CVEs? Use stackflag.com