CVE-2026-64671 | walinejs Waline up to 3.15.2 UserList widget link cross site scripting

A vulnerability, which was classified as problematic, was found in walinejs Waline up to 3.15.2. This impacts an unknown function of the component UserList widget. Executing a manipulation of the argument Link can lead to cross site scripting.

This vulnerability appears as CVE-2026-64671. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More