Related VulnerabilitiesPoCCVE-2026-48558: SimpleHelp <=5.5.15 - OIDC JWT Authentication BypassPoCCVE-2026-81578: PaperCut NG/MF <=26.0.4 - Unauthenticated ConfigEditor Access via Tapestry Complex-DirectPoCCVE-2024-57726: SimpleHelp <= 5.5.7 - Privilege EscalationPoCsimple-file-list-rce: WordPress Simple File List <=4.2.2 - Remote Code ExecutionPoCCVE-2026-48030: Pheditor 2.0.1-2.0.3 - OS Command Injection智能环保云平台 /Enterprise/CreateCode_Simple SQL 注入漏洞tianti /tianti-module-admin/ueditor/controller.jsp 服务器端请求伪造漏洞PoClimesurvey-open-redirect: LimeSurvey - Open Redirect via editorLinkDoraCMS /api/v1/upload/ueditor 服务器端请求伪造漏洞(CVE-2026-25870)PoCCVE-2024-10152: Simple Certain Time to Show Content - Cross-Site ScriptingKaltura 视频平台 /html5/html5lib/v2.34/simplePhpXMLProxy.php 服务器端请求伪造漏洞PoCwordpress-simple-social-icons-fpd: WordPress Simple Social Icons - Full Path Disclosure