CVEvulnerability

CVE-2026-77166

2.4 LOW Published 2026-09-21 Modified 2026-09-22 Official page ↗
Status
Deferred
Published
2026-09-21
Last modified
2026-09-22
Assigner
[email protected]
CVSS 3.0 ([email protected])
2.4 LOW — CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N
Weaknesses
CWE-840

Description

The emoji field in the page emoji update endpoint does not properly validate user input. By injecting long text and line breaks, the sidebar layout becomes broken and can hide other items.

Related

Weakness · not in database (1)

References