XSS in Pwncollege Dojo

CVE-2026-25117

pwn.college DOJO is an education platform for learning cybersecurity. Prior to commit e33da14449a5abcff507e554f66e2141d6683b0a, missing sandboxing on `/workspace/*` routes allows challenge authors to inject arbitrary javascript which runs…

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.006 (42.3th percentile) — read the EPSS interpretation.