VulnSocial

CVE-2026-22191Disclosure(gvectors / wpdiscuz)

LOWCVSS 5.1 · MEDIUM

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Prioritize remediation for gvectors wpdiscuz systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft
  • Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

Beghelli Sicuro24 SicuroWeb contains a template injection vulnerability that allows attackers to inject arbitrary AngularJS expressions by exploiting improper rendering of untrusted input in AngularJS template contexts. Attackers can inject malicious expressions that are compiled and executed by the AngularJS 1.5.2 runtime to achieve arbitrary JavaScript execution in operator browser sessions, with network-adjacent attackers able to deliver payloads via MITM injection in plaintext HTTP deployments.

gvectors CVEsBack to dashboard
3.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-1336

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • wpdiscuz

Threat summary

  • Public PoC and exploit tooling are both present
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Exploit tool or code specified in 1 signal
  • PoC mentioned or linked in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-03-13); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
gvectors
Products
wpdiscuz

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-03-13: 1Mentions · 2026-04-22: 1PoC Mentioned / Linked · 2026-04-22: 1Exploit Tool / Code · 2026-04-22: 1Technical Details · 2026-03-13: 1Technical Details · 2026-04-22: 103-1304-22
Signal classification2 categories
Disclosure
150.0%
PoC
150.0%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-03-131
Disclosure1
2026-04-221
PoC1
Full discourse2 posts
  • kmkz@kmkz_security
    PoC

    Update: dropped CVE-2026-22191:SSTI-> sandbox escape-> JS exec (No user interaction) CVE-2026-22192+22199: Voltronic UPS preauth root RCE chain Exposed: direct pivot into infra!🔥 Write-up https://www.boffsec-services.com/posts/sicuroweb-cve-2026-22191/ POC https://github.com/kmkz/Exploits/tree/master/2026 🫡to @catc0n & @VulnCheckAI support!

    Post summary

    The post announces CVE‑2026‑22191 (SSTI leading to JavaScript execution) and CVE‑2026‑22192/22199 (Voltronic UPS pre‑auth root RCE), providing a write‑up link and a public PoC repository, but lacks evidence of active exploitation, patches, or debunking.

    1220823814.7K
    19.6K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-22191 wpDiscuz before 7.6.47 contains a shortcode injection vulnerability that allows attackers to execute arbitrary shortcodes by including them in comment content sent vi… https://www.cve.org/CVERecord?id=CVE-2026-22191

    Post summary

    CVE-2026-22191 describes a shortcode injection flaw in wpDiscuz versions before 7.6.47 that permits execution of arbitrary shortcodes via comment content.

    00000114
    56.7K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appgvectorswpdiscuz-wordpress-

Explore more

Back to dashboardgvectors CVEswpdiscuz vulnerabilities