← Database

CVE-2026-43892

HIGH CVSS: 8.8 Published: 2026-05-12 Modified: 2026-06-17

Description

AntSword is a cross-platform website management toolkit. Prior to 2.1.16, incomplete noxss() sanitization leads to 1-click RCE via jquery.terminal format code injection. This vulnerability is fixed in 2.1.16.

Affected Platforms

Unknown

Weakness Type

CWE-79, CWE-94, CWE-1188

References