CVE-2026-117607 | Xerte Project Xerte Online Toolkits up to 3.15.5 Language Pack Import import_language.php language code injection

October 28, 2026 Yanac

A vulnerability has been found in Xerte Project Xerte Online Toolkits up to 3.15.5 and classified as problematic. This vulnerability affects unknown code of the file import_language.php of the component Language Pack Import. The manipulation of the argument Language leads to code injection.

This vulnerability is documented as CVE-2026-117607. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More