CVE-2026-61791 | schorschii OCO-Server up to 1.2.0 HTML Escaping lib/Html.class.php Html::commandButton hostname HTML injection

October 22, 2026 Yanac

A vulnerability was found in schorschii OCO-Server up to 1.2.0. It has been rated as problematic. This impacts the function Html::commandButton of the file lib/Html.class.php of the component HTML Escaping. Performing a manipulation of the argument Hostname results in HTML injection.

This vulnerability was named CVE-2026-61791. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More