{"vulnerability": "CVE-2026-5395", "sightings": [{"uuid": "309c6b0c-e206-444a-9064-eeebec4c8267", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5395", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mlsdz4dcz62t", "content": "\ud83d\udfe0 CVE-2026-5395 - High (8.2)\n\nThe Fluent Forms \u2013 Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plug...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-5395/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-14T08:02:52.502262Z"}, {"uuid": "86c2c0fb-bde3-42ea-866e-dea447fd2d7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5395", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlsivoihzf2i", "content": "CVE-2026-5395 - Fluent Forms\nCVE ID : CVE-2026-5395\n \n Published : May 14, 2026, 7:16 a.m. | 1\u00a0hour, 14\u00a0minutes ago\n \n Description : The Fluent Forms \u2013 Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Insecure Di...", "creation_timestamp": "2026-05-14T09:28:16.509268Z"}, {"uuid": "2b232355-a917-4047-a8ab-eace9c8a78d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5395", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlsje4a7ad2e", "content": "CVE-2026-5395 - Fluent Forms\nCVE ID : CVE-2026-5395\n \n Published : May 14, 2026, 7:16 a.m. | 1\u00a0hour, 9\u00a0minutes ago\n \n Description : The Fluent Forms \u2013 Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Insecure Dir...", "creation_timestamp": "2026-05-14T09:36:20.618619Z"}, {"uuid": "f69b9d55-c7e0-4e61-840b-c4f99733e917", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53950", "type": "seen", "source": "https://gist.github.com/alon710/3fbc424d9726688cb9c9bb1b3b35fa73", "content": "# CVE-2026-53950: CVE-2026-53950: DOM-based Cross-Site Scripting in @tryghost/activitypub\n\n> **CVSS Score:** 7.5\n> **Published:** 2026-08-04\n> **Full Report:** https://cvereports.com/reports/CVE-2026-53950\n\n## Summary\nA high-severity Cross-Site Scripting (XSS) vulnerability was identified in the @tryghost/activitypub package, the social and federation client library for the Ghost publishing platform. Prior to version 3.1.0, the ActivityPub client rendered incoming federated posts from external servers directly in the web user interface without proper sanitization. A maliciously customized ActivityPub server federated with a Ghost instance could transmit crafted posts containing embedded HTML payloads. When viewed by a user inside the ActivityPub client interface, the browser executes the injected JavaScript within the security context of the Ghost application domain.\n\n## TL;DR\nUnsanitized rendering of federated ActivityPub posts in @tryghost/activitypub prior to 3.1.0 allows remote attackers to execute arbitrary JavaScript in the context of Ghost administrators.\n\n## Technical Details\n\n- **CWE ID**: CWE-79\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1 Score**: 7.5 (High)\n- **EPSS Score**: 0.00204 (10.597% percentile)\n- **Exploit Status**: No known public exploits\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- Ghost Publishing Platform\n- @tryghost/activitypub package\n- **@tryghost/activitypub**: < 3.1.0 (Fixed in: `3.1.0`)\n\n## Mitigation\n\n- Upgrade @tryghost/activitypub to 3.1.0 or later\n- Implement Content Security Policy (CSP) headers on Ghost Admin interface\n- Temporarily restrict federation with untrusted nodes\n\n**Remediation Steps:**\n1. Navigate to the Ghost home directory.\n2. Execute the 'ghost update' command to pull down corrected dependency updates.\n3. Confirm the package resolution within the yarn.lock or package-lock.json of the application.\n\n## References\n\n- [GitHub Security Advisory GHSA-xpp7-93x6-v29m](https://github.com/TryGhost/Ghost/security/advisories/GHSA-xpp7-93x6-v29m)\n- [NVD Detail CVE-2026-53950](https://nvd.nist.gov/vuln/detail/CVE-2026-53950)\n- [CVE.org Record](https://www.cve.org/CVERecord?id=CVE-2026-53950)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-53950) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-05T00:31:06.113926Z"}, {"uuid": "60269b66-bea4-47b2-859a-bf382610c694", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53958", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtfd4xzxxc2m", "content": "\ud83d\udfe0 CVE-2026-53958 - High (7.6)\n\n4gaBoards is a boards system for realtime project management. Prior to 3.3.9, 4gaBoards allows an...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-53958/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-18T23:01:56.296589Z"}, {"uuid": "0366415a-d850-4c7c-b1ad-fe48697d4d9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-53957", "type": "published-proof-of-concept", "source": "https://github.com/contentful/contentful-mcp-server/security/advisories/GHSA-2xhg-73j7-rrgx", "content": "", "creation_timestamp": "2026-08-19T20:35:15.446880Z"}, {"uuid": "32f2f1ce-a7eb-4abe-9bd3-7ab05399c320", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-53951", "type": "published-proof-of-concept", "source": "https://github.com/copier-org/copier/security/advisories/GHSA-9gmc-jqmh-3rvm", "content": "", "creation_timestamp": "2026-08-19T20:35:17.687577Z"}, {"uuid": "b43b2006-ff26-4caf-a4c6-120c387fadd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53951", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq5oyk2ssy2x", "content": "CVE-2026-53951 - Copier: trust-prefix bypass via path traversal runs tasks unprompted\nCVE ID : CVE-2026-53951\n \n Published : July 8, 2026, 4:16 p.m. | 58\u00a0minutes ago\n \n Description : Copier is a library and CLI app for rendering project templates. In versions 9.5.0 through 9.1...", "creation_timestamp": "2026-07-08T17:57:18.621698Z"}, {"uuid": "15d5437e-54ff-4f81-a0ba-5ced2963aa01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53959", "type": "published-proof-of-concept", "source": "Telegram/70I5ZXCQ9tuhykRUfpeQOhK2E7uK_n9kN9IGVX__WKzWNyM", "content": "", "creation_timestamp": "2026-08-20T03:00:04.139296Z"}, {"uuid": "57be1027-1a05-4ca0-bd83-87dc85a3b79c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53959", "type": "published-proof-of-concept", "source": "Telegram/OaQKbbdvw00bB0UsV4uIS74p-Dstov7w7gsjctrALY9lZiQ", "content": "", "creation_timestamp": "2026-08-20T03:00:03.960736Z"}, {"uuid": "d25b7fcc-29e9-40f5-8bfa-7cc2c55ac32c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53959", "type": "published-proof-of-concept", "source": "Telegram/70I5ZXCQ9tuhykRUfpeQOhK2E7uK_n9kN9IGVX__WKzWNyM", "content": "", "creation_timestamp": "2026-08-21T00:00:12.239973Z"}, {"uuid": "dd96a610-28cc-478a-94f0-b0038cf96db1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53959", "type": "published-proof-of-concept", "source": "Telegram/OaQKbbdvw00bB0UsV4uIS74p-Dstov7w7gsjctrALY9lZiQ", "content": "", "creation_timestamp": "2026-08-21T00:00:12.080701Z"}]}