MEDIUM 4.8 NVD

CVE-2026-71881

Multiple injection issues in resource metadata fields in GBIF Integrated Publishing Toolkit versions before 3.3.5 allows authenticated remote attackers to execu

Multiple injection issues in resource metadata fields in GBIF Integrated Publishing Toolkit versions before 3.3.5 allows authenticated remote attackers to execute code in another user's session after user interaction via stored cross-site scripting

References

https://github.com/gbif/ipt/issues/3166
https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2026/MNDT-2026-0017.md

Published: 2026-11-07 · Source: NVD · Feed updated: 2026-11-07

This medium severity vulnerability with a CVSS score of 4.8 was published on 2026-11-07 via NVD.

vulnfeed aggregates 16326 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.