{"id":"CVE-2026-78742","title":"Silverpeas Core <=6.4.6 is vulnerable to Cross Site Scripting (XSS) via the Multimedia library application introduction.","summary":"Silverpeas Core <=6.4.6 is vulnerable to Cross Site Scripting (XSS) via the Multimedia library application introduction.","severity":"medium","cvss":6.1,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cwe":["CWE-79"],"published":"2026-09-08","updated":"2026-09-09","sourceUpdated":"2026-09-09T16:17:06.803","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-78742","references":[{"url":"https://hekk.one/posts/research/cve-2026-78742/","label":"cve@mitre.org"},{"url":"https://hekk.one/posts/research/cve-2026-78742/","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"tags":["nvd","cve.org","exploit-available"],"exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-09T15:20:27.407059Z"},"epss":0.00181,"epssPercentile":0.07938,"ingestedAt":"2026-09-08T21:11:12.368Z","slug":"CVE-2026-78742","body":"## Overview\n\nSilverpeas Core <=6.4.6 is vulnerable to Cross Site Scripting (XSS) via the Multimedia library application introduction.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":46,"depthScoreParts":{"impact":33.6,"likelihood":0,"exploitation":12,"ransomware":0},"changes":[{"seq":201942,"id":"CVE-2026-78742","ts":1789399993173,"field":"exploit_available","old":"false","new":"true"},{"seq":201941,"id":"CVE-2026-78742","ts":1789399993173,"field":"cvss","old":null,"new":"6.1"},{"seq":201940,"id":"CVE-2026-78742","ts":1789399993173,"field":"severity","old":"none","new":"medium"},{"seq":200672,"id":"CVE-2026-78742","ts":1789397585308,"field":"exploit_available","old":"true","new":"false"},{"seq":200671,"id":"CVE-2026-78742","ts":1789397585308,"field":"cvss","old":"6.1","new":null},{"seq":200670,"id":"CVE-2026-78742","ts":1789397585308,"field":"severity","old":"medium","new":"none"},{"seq":199379,"id":"CVE-2026-78742","ts":1789395475345,"field":"exploit_available","old":"false","new":"true"},{"seq":199378,"id":"CVE-2026-78742","ts":1789395475345,"field":"cvss","old":null,"new":"6.1"},{"seq":199377,"id":"CVE-2026-78742","ts":1789395475345,"field":"severity","old":"none","new":"medium"},{"seq":198624,"id":"CVE-2026-78742","ts":1789392188044,"field":"exploit_available","old":"true","new":"false"},{"seq":198623,"id":"CVE-2026-78742","ts":1789392188044,"field":"cvss","old":"6.1","new":null},{"seq":198622,"id":"CVE-2026-78742","ts":1789392188044,"field":"severity","old":"medium","new":"none"},{"seq":196955,"id":"CVE-2026-78742","ts":1789384272974,"field":"exploit_available","old":"false","new":"true"},{"seq":196954,"id":"CVE-2026-78742","ts":1789384272974,"field":"cvss","old":null,"new":"6.1"},{"seq":196953,"id":"CVE-2026-78742","ts":1789384272974,"field":"severity","old":"none","new":"medium"},{"seq":194086,"id":"CVE-2026-78742","ts":1789378693687,"field":"exploit_available","old":"true","new":"false"},{"seq":194085,"id":"CVE-2026-78742","ts":1789378693687,"field":"cvss","old":"6.1","new":null},{"seq":194084,"id":"CVE-2026-78742","ts":1789378693687,"field":"severity","old":"medium","new":"none"},{"seq":192873,"id":"CVE-2026-78742","ts":1789376494264,"field":"exploit_available","old":"false","new":"true"},{"seq":192872,"id":"CVE-2026-78742","ts":1789376494264,"field":"cvss","old":null,"new":"6.1"},{"seq":192871,"id":"CVE-2026-78742","ts":1789376494264,"field":"severity","old":"none","new":"medium"},{"seq":191660,"id":"CVE-2026-78742","ts":1789373590232,"field":"exploit_available","old":"true","new":"false"},{"seq":191659,"id":"CVE-2026-78742","ts":1789373590232,"field":"cvss","old":"6.1","new":null},{"seq":191658,"id":"CVE-2026-78742","ts":1789373590232,"field":"severity","old":"medium","new":"none"},{"seq":190445,"id":"CVE-2026-78742","ts":1789369449319,"field":"exploit_available","old":"false","new":"true"},{"seq":190444,"id":"CVE-2026-78742","ts":1789369449319,"field":"cvss","old":null,"new":"6.1"},{"seq":190443,"id":"CVE-2026-78742","ts":1789369449319,"field":"severity","old":"none","new":"medium"},{"seq":189232,"id":"CVE-2026-78742","ts":1789368373261,"field":"exploit_available","old":"true","new":"false"},{"seq":189231,"id":"CVE-2026-78742","ts":1789368373261,"field":"cvss","old":"6.1","new":null},{"seq":189230,"id":"CVE-2026-78742","ts":1789368373261,"field":"severity","old":"medium","new":"none"},{"seq":188015,"id":"CVE-2026-78742","ts":1789365211333,"field":"exploit_available","old":"false","new":"true"},{"seq":188014,"id":"CVE-2026-78742","ts":1789365211333,"field":"cvss","old":null,"new":"6.1"},{"seq":188013,"id":"CVE-2026-78742","ts":1789365211333,"field":"severity","old":"none","new":"medium"},{"seq":186802,"id":"CVE-2026-78742","ts":1789363454805,"field":"exploit_available","old":"true","new":"false"},{"seq":186801,"id":"CVE-2026-78742","ts":1789363454805,"field":"cvss","old":"6.1","new":null},{"seq":186800,"id":"CVE-2026-78742","ts":1789363454805,"field":"severity","old":"medium","new":"none"},{"seq":185588,"id":"CVE-2026-78742","ts":1789361195058,"field":"exploit_available","old":"false","new":"true"},{"seq":185587,"id":"CVE-2026-78742","ts":1789361195058,"field":"cvss","old":null,"new":"6.1"},{"seq":185586,"id":"CVE-2026-78742","ts":1789361195058,"field":"severity","old":"none","new":"medium"},{"seq":184375,"id":"CVE-2026-78742","ts":1789358318788,"field":"exploit_available","old":"true","new":"false"},{"seq":184374,"id":"CVE-2026-78742","ts":1789358318788,"field":"cvss","old":"6.1","new":null},{"seq":184373,"id":"CVE-2026-78742","ts":1789358318788,"field":"severity","old":"medium","new":"none"},{"seq":182626,"id":"CVE-2026-78742","ts":1789354302409,"field":"exploit_available","old":"false","new":"true"},{"seq":182625,"id":"CVE-2026-78742","ts":1789354302409,"field":"cvss","old":null,"new":"6.1"},{"seq":182624,"id":"CVE-2026-78742","ts":1789354302409,"field":"severity","old":"none","new":"medium"},{"seq":181419,"id":"CVE-2026-78742","ts":1789353279307,"field":"exploit_available","old":"true","new":"false"},{"seq":181418,"id":"CVE-2026-78742","ts":1789353279307,"field":"cvss","old":"6.1","new":null},{"seq":181417,"id":"CVE-2026-78742","ts":1789353279307,"field":"severity","old":"medium","new":"none"},{"seq":180212,"id":"CVE-2026-78742","ts":1789350265208,"field":"exploit_available","old":"false","new":"true"},{"seq":180211,"id":"CVE-2026-78742","ts":1789350265208,"field":"cvss","old":null,"new":"6.1"}]}