MEDIUMUnknown

pulpcore: python-pulpcore: Stored cross-site scripting via inline rendering of uploaded HTML/SVG content

pulpcore: python-pulpcore: Stored cross-site scripting via inline rendering of uploaded HTML/SVG content

CVE-2026-84232Published 5 days agoUpdated 5 days agoSource: Red Hat

Affected packages

No package-level mapping for this advisory.

Exploit signal

Known exploited (CISA KEV)
No
EPSS score
EPSS percentile

EPSS is the probability a CVE is exploited in the wild; percentile is its rank among all CVEs.

pulpcore: python-pulpcore: Stored cross-site scripting via inline rendering of uploaded HTML/SVG content | HackTribune