{"id":"CVE-2026-110101","title":"Koillection through 1.8.4 contains a stored cross-site scripting vulnerability that allows authenticated users to upload HTML files as Datum file attachments lacking MIME restrictions","summary":"Koillection through 1.8.4 contains a stored cross-site scripting vulnerability that allows authenticated users to upload HTML files as Datum file attachments lacking MIME restrictions. Attackers can upload HTML payloads via POST /api/dat…","severity":"medium","cvss":5.4,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","cwe":["CWE-79"],"published":"2026-10-13","updated":"2026-10-13","sourceUpdated":"2026-10-13T17:17:33.830","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-110101","references":[{"url":"https://github.com/benjaminjonard/koillection/blob/1.8.4/src/Entity/Datum.php#L141-L145","label":"disclosure@vulncheck.com"},{"url":"https://github.com/benjaminjonard/koillection/blob/1.8.4/src/Service/ImageHandler.php#L43-L50","label":"disclosure@vulncheck.com"},{"url":"https://github.com/benjaminjonard/koillection/issues/1609","label":"disclosure@vulncheck.com"},{"url":"https://github.com/benjaminjonard/koillection/releases/tag/1.8.4","label":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/koillection-through-1.8.4-stored-xss-via-datum-file-attachment-uploads","label":"disclosure@vulncheck.com"}],"tags":["nvd"],"ingestedAt":"2026-10-13T17:38:53.184Z","slug":"CVE-2026-110101","body":"## Overview\n\nKoillection through 1.8.4 contains a stored cross-site scripting vulnerability that allows authenticated users to upload HTML files as Datum file attachments lacking MIME restrictions. Attackers can upload HTML payloads via POST /api/data/{id}/file, served as text/html from public/uploads, executing JavaScript in victims' sessions to perform actions on their behalf.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":30,"depthScoreParts":{"impact":29.7,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}