Vulnerabilities in jhuckaby

5 results

CVE-2026-55562CRITICALCronicle: Stored XSS in admin Activity Log via account full_name fieldEPSS 0.5%CVE-2026-58255HIGHCronicle: Non-admin uid/gid injection in create_event/update_event → run-as-arbitrary-user (incl. root) — sibling of CVE-2026-39401EPSS 0.4%CVE-2026-85076CRITICALCronicle: Privilege Escalation via Arbitrary Environment Variable Injection through Event Params (Incomplete Fix for CVE-2026-39401)EPSS 0.4%CVE-2026-39401MEDIUMPrivilege Escalation via update_event Job Output in CronicleEPSS 0.2%CVE-2026-39400MEDIUMStored XSS via Job HTML/Table Output in CronicleEPSS 0.2%