CVE-2026-14752

LOW 3.5

mjperpinosa stumasy add_into_dictionary.php add_definition cross site scripting

CVSS Score

3.5

EPSS Score

0.2%

EPSS Percentile

10th

A security vulnerability has been detected in mjperpinosa stumasy up to 327d1b0f2915ba79d7ef8ebb74553e987609d9be. This affects the function add_definition of the file application/PHP/objects/notes/add_into_dictionary.php. Such manipulation of the argument reference leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The project was informed of the problem early through an issue report but has not responded yet.

CWE	CWE-79 CWE-94
Vendor	mjperpinosa
Product	stumasy
Published	Jul 5, 2026
Last Updated	Jul 6, 2026

Stay Ahead of the Next One

Get instant alerts for mjperpinosa stumasy

Be the first to know when new low vulnerabilities affecting mjperpinosa stumasy are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

mjperpinosa / stumasy

327d1b0f2915ba79d7ef8ebb74553e987609d9be

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/376341 vuldb.com: https://vuldb.com/vuln/376341/cti vuldb.com: https://vuldb.com/cve/CVE-2026-14752 vuldb.com: https://vuldb.com/submit/849495 github.com: https://github.com/mjperpinosa/stumasy/issues/8 github.com: https://github.com/mjperpinosa/stumasy/

Credits

🔍 cnluminous (VulDB User) VulDB CNA Team