Reference page — cumulative record through Tuesday, October 20, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-692
Weakness type CWE-692 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 5 | 5 | 0 |
Monthly trend
█▃▁▃
2026-07 3 · 2026-08 1 · 2026-09 0 · 2026-10 1
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2026-71478 | 6.1 | 27.7 | — | league/commonmark: AttributesExtension href/src unsafe-link filter bypass via embedded … |
| CVE-2024-42214 | 5.3 | 24.6 | — | — |
| CVE-2024-23569 | 4.3 | 21.0 | — | — |
| CVE-2026-15295 | 4.4 | 14.4 | — | Ajax Load More <= 7.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting |
| CVE-2026-107396 | 5.4 | 8.7 | — | Indico: Cross-Site-Scripting in link fields |
Most-affected vendors
| Vendor | CVEs |
|---|---|
| hclsoftware | 2 |
| dcooney | 1 |
| indico | 1 |
| thephpleague | 1 |
