CVE-2026-116229

Publié : 26 octobre 2026

Modifié : 26 octobre 2026

Score CVSS

3.5

LOW

Description détaillée

A vulnerability was determined in ffxiv-teamcraft FFXIV Teamcraft up to 11.4.31. Impacted is the function clipboard.readText of the file apps/electron/src/preload.ts of the component Renderer-Process IPC Bridge. This manipulation causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 11.4.32 is recommended to address this issue. Patch name: def118fdf36f8f3b615966893a132dd81d9cc3dc. Upgrading the affected component is recommended.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

Références et Patchs

https://drive.google.com/drive/folders/1pxitXRLnnnl9GPnyN83ILAgWHWve3ezX?usp=sharing https://github.com/ffxiv-teamcraft/ffxiv-teamcraft/commit/def118fdf36f8f3b615966893a132dd81d9cc3dc https://github.com/ffxiv-teamcraft/ffxiv-teamcraft/releases/tag/v11.4.32 https://vuldb.com/cve/CVE-2026-116229 https://vuldb.com/submit/1007305 https://vuldb.com/vuln/426278 https://vuldb.com/vuln/426278/cti

Dernières Vulnérabilités

CVE-2026-97295

Cross-Site Request Forgery (CSRF) vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Cross Site Request Forgery.This issue affects Media LIbrary Assistant: from n/a through 3.42.

VOIR DÉTAILS

CVE-2026-97255

Authorization Bypass Through User-Controlled Key vulnerability in WProyal Royal Elementor Addons royal-elementor-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Royal Elementor Addons: from n/a through 1.7.1069.

VOIR DÉTAILS

CVE-2026-97254

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WProyal Royal Elementor Addons royal-elementor-addons allows Stored XSS.This issue affects Royal Elementor Addons: from n/a through 1.7.1069.

VOIR DÉTAILS