PT-2026-45278 · Mettle · Sendportal

B1Scuit + 2 · Publicado 2026-06-01 · Atualizado 2026-06-01 · CVE-2026-10234

NVD

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:P/A:N

A vulnerability was detected in Mettle sendportal up to 3.0.1. This affects an unknown part of the file /webview/ of the component Campaign Handler. The manipulation of the argument content results in cross site scripting. The attack can be launched remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Exploit

Correção

XSS

Code Injection

Enumeração de Fraquezas

CWE-79

CWE-94

Identificadores relacionados

CVE-2026-10234

Produtos afetados

Sendportal

Referências · 8

• 🔥 https://github.com/mettle/sendportal/issues/338 · Exploit
• https://vuldb.com/submit/825494 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-10234 · Nota de Segurança
• https://vuldb.com/vuln/367513/cti · Nota
• https://github.com/mettle/sendportal · Nota
• https://vuldb.com/cve/CVE-2026-10234 · Nota
• https://vuldb.com/submit/822923 · Nota
• https://vuldb.com/vuln/367513 · Nota