HumHub 1.18.0
Approved changes feed: RSS · Atom
cpe:2.3:a:humhub:humhub:1.18.0:-:*:*:*:*:*:*
part: a version: 1.18.0 update: -
| Vendor | Humhub (207df78f-b45f-5aa6-92d9-43f6e5adcae3) |
|---|---|
| Product | Humhub (b59ff62f-0863-5fcb-b1d3-5eb2527f120a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:bitbucket/jasoncain/humhub |
purl2cpe | 2026-08-13 06:19:47.851340 |
pkg:github/humhub/humhub |
purl2cpe | 2026-08-13 06:19:47.851341 |
pkg:rpm/opensuse/humhub |
purl2cpe | 2026-08-13 06:19:47.851342 |
pkg:sourceforge/humhub |
purl2cpe | 2026-08-13 06:19:47.851344 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-29048 |
vulnerable | 2026-06-08 07:55:16.032755 |
HumHub: XSS in Button component
HumHub is an Open Source Enterprise Social Network. In version 1.18.0, a cross-site scripting vulnerability was identified in the Button component of version 1.18.0. Due to inconsistent output encoding at several points within the software, malicious scripts could be injected and executed in the context of the user's browser. This issue has been patched in version 1.18.1.
Published: 2026-03-06T06:59:42.084Z
Updated: 2026-03-09T19:56:13.803Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.