Skip to content

CreativeMindsSolutions CM Custom Reports – Flexible reporting to track what matters most

CVE-2026-2432 Medium 4.4 CM Custom Reports <= 1.2.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Labels 0.3%
CVE-2026-2431 Medium 6.1 CM Custom Reports <= 1.2.7 - Reflected Cross-Site Scripting via 'date_from' and 'date_to' Parameters 0.3%