CVE-2026-24010
High · 8.8CVSS
8.8
EPSS
0.5%
Published
Jan 22, 2026
CISA due date
—
The record
Horilla has HTML Injection Issue that, with Phishing, Leads to Account Takeover
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-50719 The Ingenic T41, and probably also T32, T40, and A1 SoC boot ROMs parse and execute an… CWE-474
- CVE-2026-39894 Cacti is an open source performance and fault management framework. CWE-474
- CVE-2026-11097 Inappropriate implementation in WebView in Google Chrome on Android prior to… CWE-474
- CVE-2026-0902 Inappropriate implementation in V8 in Google Chrome prior to 144.0.7559.59 allowed a… CWE-474
- CVE-2026-114577 A vulnerability was found in oretnom23 php-travel-agency-system. CWE-74
- CVE-2026-114575 A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. CWE-74
- CVE-2026-112150 A security flaw has been discovered in vraj404 Criminal-Management-System up to… CWE-74
- CVE-2026-112141 A vulnerability was determined in satya-vinay Events-Management-System up to… CWE-74