CVE-2026-38935 | diskover-community up to 2.3.5 public/view.php doctype cross site scripting

April 27, 2026 Yanac

A vulnerability described as problematic has been identified in diskover-community up to 2.3.5. Affected by this vulnerability is an unknown functionality of the file public/view.php. Executing a manipulation of the argument doctype can lead to cross site scripting.

The identification of this vulnerability is CVE-2026-38935. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More