<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: humhub</title><description>Every new CVE for humhub.</description><link>https://agentprime.io/</link><item><title>CVE-2026-93769: HumHub 1.18.5 - Stored XSS in Profile Field Category title via HForm#renderForm leading to System Administrator account takeover</title><link>https://agentprime.io/advisories/CVE-2026-93769/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-93769/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 23 Sep 2026 15:49:51 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-18430: HumHub 1.18.4 - Stored XSS in comment-deletion notifications through unescaped administrator reason</title><link>https://agentprime.io/advisories/CVE-2026-18430/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-18430/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 19 Aug 2026 15:52:49 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-18756: HumHub Community Edition 1.18.4-pl1 - Reflected XSS in Space membership request button rendering</title><link>https://agentprime.io/advisories/CVE-2026-18756/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-18756/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 19 Aug 2026 14:46:25 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-18526: HumHub 1.18.4 / 1.18.4-pl1 – Stored Cross-Site Scripting in oEmbed confirmation</title><link>https://agentprime.io/advisories/CVE-2026-18526/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-18526/</guid><description>CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 19 Aug 2026 14:17:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-47657: HumHub Missing Authorization on Remove All Space Members Action</title><link>https://agentprime.io/advisories/CVE-2026-47657/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-47657/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 21 Jul 2026 17:50:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-29048: HumHub: XSS in Button component</title><link>https://agentprime.io/advisories/CVE-2026-29048/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-29048/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 06 Mar 2026 06:59:42 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-64442: HumHub is vulnerable to XSS through its Meta Search component</title><link>https://agentprime.io/advisories/CVE-2025-64442/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-64442/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 07 Nov 2025 20:28:20 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-52043: User enumeration in HubHub</title><link>https://agentprime.io/advisories/CVE-2024-52043/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-52043/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 06 Nov 2024 07:51:17 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-31133: Cross site scripting in HumHub</title><link>https://agentprime.io/advisories/CVE-2022-31133/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-31133/</guid><description>CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 07 Jul 2022 17:45:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2017-20028: HumHub privileges management</title><link>https://agentprime.io/advisories/CVE-2017-20028/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2017-20028/</guid><description>CVSS 5.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 09 Jun 2022 22:36:05 GMT</pubDate><category>CVE</category></item><item><title>CVE-2017-20027: HumHub DOM cross site scriting</title><link>https://agentprime.io/advisories/CVE-2017-20027/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2017-20027/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 09 Jun 2022 22:36:03 GMT</pubDate><category>CVE</category></item><item><title>CVE-2017-20026: HumHub Reflected cross site scriting</title><link>https://agentprime.io/advisories/CVE-2017-20026/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2017-20026/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 09 Jun 2022 22:36:02 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-24865: Improper access control in humhub</title><link>https://agentprime.io/advisories/CVE-2022-24865/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-24865/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 20 Apr 2022 20:05:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-43847: Authorization Bypass in Space Invite in HumHub</title><link>https://agentprime.io/advisories/CVE-2021-43847/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-43847/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 20 Dec 2021 21:35:12 GMT</pubDate><category>CVE</category></item></channel></rss>