CVE-2026-116229Low· 3.5▾ TwilightPoC availableA vulnerability was determined in ffxiv-teamcraft FFXIV Teamcraft up to 11.4.31. Impacted is the function clipboard.readText of the file apps/electron/src/preload.ts of the component Renderer-Process IPC Bridge. This manipulation causes …
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 19.3 · likelihood 0 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Exploit-prediction probability, daily snapshots since Oct 26.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.2%
Exploit / PoC code exists
A vulnerability was determined in ffxiv-teamcraft FFXIV Teamcraft up to 11.4.31. Impacted is the function clipboard.readText of the file apps/electron/src/preload.ts of the component Renderer-Process IPC Bridge. This manipulation causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 11.4.32 is recommended to address this issue. Patch name: def118fdf36f8f3b615966893a132dd81d9cc3dc. Upgrading the affected component is recommended.
ffxiv_teamcraft 11.4.0ffxiv_teamcraft 11.4.1ffxiv_teamcraft 11.4.2ffxiv_teamcraft 11.4.3ffxiv_teamcraft 11.4.4ffxiv_teamcraft 11.4.5ffxiv_teamcraft 11.4.6ffxiv_teamcraft 11.4.7ffxiv_teamcraft 11.4.8ffxiv_teamcraft 11.4.9ffxiv_teamcraft 11.4.10ffxiv_teamcraft 11.4.11ffxiv_teamcraft 11.4.12ffxiv_teamcraft 11.4.13ffxiv_teamcraft 11.4.14ffxiv_teamcraft 11.4.15ffxiv_teamcraft 11.4.16ffxiv_teamcraft 11.4.17ffxiv_teamcraft 11.4.18ffxiv_teamcraft 11.4.19ffxiv_teamcraft 11.4.20ffxiv_teamcraft 11.4.21ffxiv_teamcraft 11.4.22ffxiv_teamcraft 11.4.23ffxiv_teamcraft 11.4.24ffxiv_teamcraft 11.4.25ffxiv_teamcraft 11.4.26ffxiv_teamcraft 11.4.27ffxiv_teamcraft 11.4.28ffxiv_teamcraft 11.4.29ffxiv_teamcraft 11.4.30ffxiv_teamcraft 11.4.31Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2021-41184Medium· 6.5jQuery-UI is the official jQuery user interface library
CVE-2021-41182Medium· 6.5jQuery-UI is the official jQuery user interface library
CVE-2020-3580Medium· 6.1Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct cross-site scripting …
CVE-2015-20116Medium· 6.1RealtyScript 4.0.2 Stored Cross-Site Scripting via CSV File Upload Filename
CVE-2015-20119Medium· 6.4RealtyScript 4.0.2 Stored Cross-Site Scripting via text Parameter in pages.php
CVE-2015-20114Medium· 6.1RealtyScript 4.0.2 Cross-Site Scripting via Multiple Parameters