BookStackApp BookStack

• CVE-2026-116020 Medium 5.4 BookStack before 26.09.2 Incorrect Authorization via AttachmentController on Draft Pages 0.2%
• CVE-2026-89022 High 7.4 BookStack < 26.05.5 Authentication Bypass via Social Login Provider Confusion 0.5%
• CVE-2026-84695 High 8.7 BookStack before 26.05.4 Stored XSS via Drawing Upload 0.5%
• CVE-2026-82450 High 8.8 BookStack before 26.05.4 Remote Code Execution via Book Cover 1.0%
• CVE-2026-67204 Medium 5.4 BookStack < 26.05.4 Broken Access Control via Image Gallery API 0.4%
• CVE-2026-5484 Medium 5.3 BookStackApp BookStack Chapter Export ExportFormatter.php chapterToMarkdown access control 0.3%
• CVE-2020-26260 Medium 6.4 Server Side Request Forgery in BookStack 0.8%
• CVE-2020-26211 High 7.7 Cross-Site Scripting in BookStack 1.1%
• CVE-2020-26210 High 7.7 Cross-Site Scripting in BookStack 1.2%
• CVE-2020-11055 Medium 6.3 Cross-site Scripting in BookStack 0.8%
• CVE-2020-5256 High 7.9 Remote Code Execution Through Image Uploads in BookStack 2.0%