↓Skip to main content

CVE-2026-78738

[ RESEARCH ] - CVE-2026-78738 - Stored XSS Silverpeas Core 6.4.6 - File upload feature

5 September 2026·384 words·2 mins

RESEARCH CVE-2026-78738 SILVERPEAS

Stored XSS in Silverpeas Document Management. By modifying the X-FULL-PATH header during file upload with an XSS payload, the payload executes when the file’s preview button is clicked.