Security Advisory

CVE-2026-18430

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-19 15:52:49

Last updated 2026-08-19 19:21:03

Assigner Fluid Attacks

CVSS score 7.2

State PUBLISHED

Description

HumHub 1.18.4 contains a stored cross-site scripting vulnerability in the comment-deletion notification flow. A Space administrator can delete another user's comment, choose to notify the original author, and place HTML/JavaScript in the deletion reason.

← Browse all CVEs View on cve.org ↗