CVE-2026-110101 | benjaminjonard Koillection up to 1.8.4 HTML file /api/data/{id}/file HTML injection

October 13, 2026 Yanac

A vulnerability has been found in benjaminjonard Koillection up to 1.8.4 and classified as problematic. Affected by this issue is some unknown functionality of the file /api/data/{id}/file of the component HTML file Handler. This manipulation causes HTML injection.

This vulnerability is tracked as CVE-2026-110101. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More