agentprime: pi-hole-webEvery new CVE for pi-hole-web.https://agentprime.io/CVE-2026-33405: Pi-hole has a Stored HTML Injection in queries.jshttps://agentprime.io/advisories/CVE-2026-33405/https://agentprime.io/advisories/CVE-2026-33405/CVSS 3.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 06 Apr 2026 15:23:32 GMTCVECVE-2026-33406: Pi-hole has a Stored HTML attribute injectionhttps://agentprime.io/advisories/CVE-2026-33406/https://agentprime.io/advisories/CVE-2026-33406/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 06 Apr 2026 14:50:35 GMTCVECVE-2026-33404: Pi-hole has a Stored XSS / HTML injection in the Network page/Dashboardhttps://agentprime.io/advisories/CVE-2026-33404/https://agentprime.io/advisories/CVE-2026-33404/CVSS 3.4 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 06 Apr 2026 14:48:45 GMTCVECVE-2026-33403: Pi-hole has a Reflected XSS / HTML injection in taillog.jshttps://agentprime.io/advisories/CVE-2026-33403/https://agentprime.io/advisories/CVE-2026-33403/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 06 Apr 2026 14:48:05 GMTCVECVE-2026-33765: Pi-hole Web Interface has a Command Injection Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-33765/https://agentprime.io/advisories/CVE-2026-33765/CVSS 8.9 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 27 Mar 2026 19:46:57 GMTCVECVE-2026-26953: Pi-hole Web Interface has Stored HTML Injection via X-Forwarded-For Header in Active Sessions Tablehttps://agentprime.io/advisories/CVE-2026-26953/https://agentprime.io/advisories/CVE-2026-26953/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 19 Feb 2026 22:50:08 GMTCVECVE-2026-26952: Pi-hole Web Interface has Stored HTML Injection via Local DNS Records (CNAME/Hosts) in data-tag Attributehttps://agentprime.io/advisories/CVE-2026-26952/https://agentprime.io/advisories/CVE-2026-26952/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 19 Feb 2026 22:43:58 GMTCVECVE-2025-59151: Pi-hole Admin Interface vulnerable to HTTP response header injection via CRLF injectionhttps://agentprime.io/advisories/CVE-2025-59151/https://agentprime.io/advisories/CVE-2025-59151/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Oct 2025 19:42:59 GMTCVECVE-2025-53533: Pi-hole Admin Interface vulnerable to cross-site scripting via malformed URL path on 404 error pagehttps://agentprime.io/advisories/CVE-2025-53533/https://agentprime.io/advisories/CVE-2025-53533/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Oct 2025 19:06:32 GMTCVECVE-2025-32785: Pi-hole Admin Interface vulnerable to persistent XSS on Subscribed lists group management (Adress Field)https://agentprime.io/advisories/CVE-2025-32785/https://agentprime.io/advisories/CVE-2025-32785/CVSS 2.0 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Oct 2025 18:44:15 GMTCVE