Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-18371 1 M-files Corporation 1 M-files Web 2026-08-21 N/A
HTML injection vulnerability in M-Files Web before 26.8.16330.2 allows an authenticated attacker to affect web user interface contents displayed to other users.
CVE-2026-18372 1 M-files Corporation 1 M-files Web 2026-08-21 N/A
CSS injection vulnerability in M-Files Web before 26.8.16330.2 allows an authenticated vault administrator to inject arbitrary CSS, affecting the web user interface displayed to other vault users.