CVE-2026-54053 | brufdev Many Notes up to 0.15.x ZIP Vault Import ProcessImportedVault.php cross site scripting

A vulnerability, which was classified as problematic, has been found in brufdev Many Notes up to 0.15.x. Impacted is an unknown function of the file app/Actions/ProcessImportedVault.php of the component ZIP Vault Import. The manipulation leads to cross site scripting.

This vulnerability is documented as CVE-2026-54053. The attack can be initiated remotely. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More