medium6.1
CVE-2026-38935
A reflected cross-site scripting (XSS) vulnerability exists in diskover-community <= 2.3.5 in public/view.php via the doctype parameter
Impact
A reflected cross-site scripting (XSS) vulnerability exists in diskover-community <= 2.3.5 in public/view.php via the doctype parameter
Affected products
| Product | Affected versions |
|---|---|
| Diskover-Community | through 2.3.5 |
Versions were read from the advisory text. No structured product data has been published for this record yet.