{"id":"CVE-2026-78738","title":"Silverpeas Core 6.4.6 is vulnerable to Cross Site Scripting (XSS) via the Document management file upload feature.","summary":"Silverpeas Core 6.4.6 is vulnerable to Cross Site Scripting (XSS) via the Document management file upload feature.","severity":"medium","cvss":6.1,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cwe":["CWE-79"],"published":"2026-09-08","updated":"2026-09-09","sourceUpdated":"2026-09-09T20:20:42.227","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-78738","references":[{"url":"https://hekk.one/posts/research/cve-2026-78738/","label":"cve@mitre.org"},{"url":"https://hekk.one/posts/research/cve-2026-78738/","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"tags":["nvd","cve.org","exploit-available"],"exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-09T18:39:50.411594Z"},"epss":0.00181,"epssPercentile":0.07941,"ingestedAt":"2026-09-08T21:11:12.368Z","slug":"CVE-2026-78738","body":"## Overview\n\nSilverpeas Core 6.4.6 is vulnerable to Cross Site Scripting (XSS) via the Document management file upload feature.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":46,"depthScoreParts":{"impact":33.6,"likelihood":0,"exploitation":12,"ransomware":0},"changes":[{"seq":201936,"id":"CVE-2026-78738","ts":1789399993160,"field":"exploit_available","old":"false","new":"true"},{"seq":201935,"id":"CVE-2026-78738","ts":1789399993160,"field":"cvss","old":null,"new":"6.1"},{"seq":201934,"id":"CVE-2026-78738","ts":1789399993160,"field":"severity","old":"none","new":"medium"},{"seq":200666,"id":"CVE-2026-78738","ts":1789397584764,"field":"exploit_available","old":"true","new":"false"},{"seq":200665,"id":"CVE-2026-78738","ts":1789397584764,"field":"cvss","old":"6.1","new":null},{"seq":200664,"id":"CVE-2026-78738","ts":1789397584764,"field":"severity","old":"medium","new":"none"},{"seq":199373,"id":"CVE-2026-78738","ts":1789395475331,"field":"exploit_available","old":"false","new":"true"},{"seq":199372,"id":"CVE-2026-78738","ts":1789395475331,"field":"cvss","old":null,"new":"6.1"},{"seq":199371,"id":"CVE-2026-78738","ts":1789395475331,"field":"severity","old":"none","new":"medium"},{"seq":198618,"id":"CVE-2026-78738","ts":1789392187242,"field":"exploit_available","old":"true","new":"false"},{"seq":198617,"id":"CVE-2026-78738","ts":1789392187242,"field":"cvss","old":"6.1","new":null},{"seq":198616,"id":"CVE-2026-78738","ts":1789392187242,"field":"severity","old":"medium","new":"none"},{"seq":196949,"id":"CVE-2026-78738","ts":1789384272960,"field":"exploit_available","old":"false","new":"true"},{"seq":196948,"id":"CVE-2026-78738","ts":1789384272960,"field":"cvss","old":null,"new":"6.1"},{"seq":196947,"id":"CVE-2026-78738","ts":1789384272960,"field":"severity","old":"none","new":"medium"},{"seq":194080,"id":"CVE-2026-78738","ts":1789378692311,"field":"exploit_available","old":"true","new":"false"},{"seq":194079,"id":"CVE-2026-78738","ts":1789378692311,"field":"cvss","old":"6.1","new":null},{"seq":194078,"id":"CVE-2026-78738","ts":1789378692311,"field":"severity","old":"medium","new":"none"},{"seq":192867,"id":"CVE-2026-78738","ts":1789376494251,"field":"exploit_available","old":"false","new":"true"},{"seq":192866,"id":"CVE-2026-78738","ts":1789376494251,"field":"cvss","old":null,"new":"6.1"},{"seq":192865,"id":"CVE-2026-78738","ts":1789376494251,"field":"severity","old":"none","new":"medium"},{"seq":191654,"id":"CVE-2026-78738","ts":1789373589237,"field":"exploit_available","old":"true","new":"false"},{"seq":191653,"id":"CVE-2026-78738","ts":1789373589237,"field":"cvss","old":"6.1","new":null},{"seq":191652,"id":"CVE-2026-78738","ts":1789373589237,"field":"severity","old":"medium","new":"none"},{"seq":190439,"id":"CVE-2026-78738","ts":1789369449303,"field":"exploit_available","old":"false","new":"true"},{"seq":190438,"id":"CVE-2026-78738","ts":1789369449303,"field":"cvss","old":null,"new":"6.1"},{"seq":190437,"id":"CVE-2026-78738","ts":1789369449303,"field":"severity","old":"none","new":"medium"},{"seq":189226,"id":"CVE-2026-78738","ts":1789368372593,"field":"exploit_available","old":"true","new":"false"},{"seq":189225,"id":"CVE-2026-78738","ts":1789368372593,"field":"cvss","old":"6.1","new":null},{"seq":189224,"id":"CVE-2026-78738","ts":1789368372593,"field":"severity","old":"medium","new":"none"},{"seq":188009,"id":"CVE-2026-78738","ts":1789365211319,"field":"exploit_available","old":"false","new":"true"},{"seq":188008,"id":"CVE-2026-78738","ts":1789365211319,"field":"cvss","old":null,"new":"6.1"},{"seq":188007,"id":"CVE-2026-78738","ts":1789365211319,"field":"severity","old":"none","new":"medium"},{"seq":186796,"id":"CVE-2026-78738","ts":1789363454279,"field":"exploit_available","old":"true","new":"false"},{"seq":186795,"id":"CVE-2026-78738","ts":1789363454279,"field":"cvss","old":"6.1","new":null},{"seq":186794,"id":"CVE-2026-78738","ts":1789363454279,"field":"severity","old":"medium","new":"none"},{"seq":185582,"id":"CVE-2026-78738","ts":1789361195045,"field":"exploit_available","old":"false","new":"true"},{"seq":185581,"id":"CVE-2026-78738","ts":1789361195045,"field":"cvss","old":null,"new":"6.1"},{"seq":185580,"id":"CVE-2026-78738","ts":1789361195045,"field":"severity","old":"none","new":"medium"},{"seq":184369,"id":"CVE-2026-78738","ts":1789358318253,"field":"exploit_available","old":"true","new":"false"},{"seq":184368,"id":"CVE-2026-78738","ts":1789358318253,"field":"cvss","old":"6.1","new":null},{"seq":184367,"id":"CVE-2026-78738","ts":1789358318253,"field":"severity","old":"medium","new":"none"},{"seq":182620,"id":"CVE-2026-78738","ts":1789354302396,"field":"exploit_available","old":"false","new":"true"},{"seq":182619,"id":"CVE-2026-78738","ts":1789354302396,"field":"cvss","old":null,"new":"6.1"},{"seq":182618,"id":"CVE-2026-78738","ts":1789354302396,"field":"severity","old":"none","new":"medium"},{"seq":181413,"id":"CVE-2026-78738","ts":1789353279045,"field":"exploit_available","old":"true","new":"false"},{"seq":181412,"id":"CVE-2026-78738","ts":1789353279045,"field":"cvss","old":"6.1","new":null},{"seq":181411,"id":"CVE-2026-78738","ts":1789353279045,"field":"severity","old":"medium","new":"none"},{"seq":180206,"id":"CVE-2026-78738","ts":1789350265194,"field":"exploit_available","old":"false","new":"true"},{"seq":180205,"id":"CVE-2026-78738","ts":1789350265194,"field":"cvss","old":null,"new":"6.1"}]}