CVE-2026-121008 | Tree up to 2.000001_03 Html Profile format bind HTML injection

November 4, 2026 Yanac

A vulnerability classified as problematic has been found in Tree up to 2.000001_03. This affects the function format of the component Html Profile. The manipulation of the argument bind leads to HTML injection.

This vulnerability is uniquely identified as CVE-2026-121008. The attack is possible to be carried out remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More