CVE-2026-14467
Display of information in the Forocoches comments editor
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
An information disclosure vulnerability in the Forocoches comments editor that allows an attacker to obtain unauthorised user information by inserting an image containing a malicious external URL into a comment. When a victim views the discussion thread, their browser automatically sends an HTTP/HTTPS request to the server controlled by the attacker, who can then collect information such as the source IP address, the User-Agent header, the date and time of access, and other metadata derived from the request, thereby compromising the user’s privacy.
| CWE | CWE-200 |
| Vendor | forocoches |
| Product | forocoches comments editor |
| Published | Oct 30, 2026 |
Stay Ahead of the Next One
Get instant alerts for forocoches forocoches comments editor
Be the first to know when new unknown vulnerabilities affecting forocoches forocoches comments editor are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Forocoches / Forocoches comments editor
0 < May 2026
References
Credits
Miguel Jiménez Cámara