Medium
6.5
Subscriber Cross Site Scripting (XSS) in Podamibe Custom User Gravatar <= 1.0.8 versions.
CVE-2026-54865
First seen on SecPulse
Affected packages
| Ecosystem | Package | Affected | Fixed |
|---|---|---|---|
| Podamibe Nepal | Podamibe Custom User Gravatar |
≤ 1.0.8 |
— |
References
- web patchstack.com
- web nvd.nist.gov
- web github.com