Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
XinLiangCoder php_api_doc through commit 1ce5bbf contains a reflected cross-site scripting vulnerability in list_method.php that allows remote attackers to execute arbitrary JavaScript in a victim's browser by injecting malicious code through the f parameter. Attackers can craft a malicious URL with unsanitized input in the GET request parameter that is output directly to the page without proper neutralization, enabling session hijacking, credential theft, or malware distribution within the application context.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-20 | 1 | General1 |
| 2026-03-22 | 1 | Disclosure1 |
CVE-2026-32844 XinLiangCoder php_api_doc through commit 1ce5bbf contains a reflected cross-site scripting vulnerability in list_method.php that allows remote attackers to execute ar… https://www.cve.org/CVERecord?id=CVE-2026-32844
Post summary
CVE-2026-32844 reveals a reflected XSS flaw in XinLiangCoder’s list_method.php, potentially enabling remote attackers to execute code.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-32844 - XinLiangCoder / php_api_doc Reflected XSS via list_method.php Intel Report: https://ift.tt/y4fMDN3
Post summary
An alert identifies a reflected XSS vulnerability in php_api_doc's list_method.php (CVE-2026-32844), but provides no evidence of exploitation, patch, or proof‑of‑concept.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | xinliangcoder | php_api_doc | - | - | - |