CVE-2026-129163 | Dromara Free-Fs up to 2.3.1 HTML File HTML injection

November 13, 2026 Yanac

A vulnerability has been found in Dromara Free-Fs up to 2.3.1 and classified as problematic. This impacts an unknown function of the component HTML File Handler. The manipulation leads to HTML injection.

This vulnerability is uniquely identified as CVE-2026-129163. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More