References https://www.twcert.org.tw/tw/cp-132-8065-579c1-1.html https://lic.nuk.edu.tw/p/406-1012-81528,r73.php?Lang=zh-tw https://www.twcert.org.tw/newepaper/cp-151-8065-579c1-3.html https://www.ithome.com.tw/news/168811 https://www.planet.com.tw/en/support/security-advisory/6
Related VulnerabilitiesPoCCVE-2026-28141: NextGEN Gallery <= 4.2.3 - Reflected Cross-Site ScriptingPoCCVE-2026-41456: Bludit CMS <= 3.20.0 - Cross-Site ScriptingPoCCVE-2026-57582: GeoNetwork - Reflected Cross-Site ScriptingPoCCVE-2026-58191: Appium base-driver <=10.6.0 - Reflected Cross-Site ScriptingPoCCVE-2022-39258: Mailcow Dockerized Swagger UI - Cross-Site ScriptingPoCCVE-2026-0743: WP Content Permission <= 1.2 - Cross-Site ScriptingPoCCVE-2026-42596: Gotenberg < 8.31.0 - Server-Side Request ForgeryHepta Platforms|Heptabase - Stored Cross-Site ScriptingPoCCVE-2026-35037: Ech0 < 4.2.8 - Server-Side Request ForgeryPoCCVE-2026-49069: WPZOOM Portfolio <= 1.4.21 - Reflected Cross-Site ScriptingPoCCVE-2026-55087: Etherpad 2.1.0 <= 3.0.0 - Cross-Site ScriptingPoCCVE-2026-32255: Kan <= 0.5.4 - Server-Side Request ForgeryPoCcaseaware-xss: CaseAware a360inc - Cross-Site Scripting