Medium severityNVD Advisory· Published Nov 7, 2026

CVE-2026-71881

Description

Multiple injection issues in resource metadata fields in GBIF Integrated Publishing Toolkit versions before 3.3.5 allows authenticated remote attackers to execute code in another user's session after user interaction via stored cross-site scripting

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Gbif/iptllm-fuzzy
Range: <3.3.5
Gbif/Integrated Publishing Toolkitllm-fuzzy
Range: <3.3.5

Patches

Vulnerability mechanics

References

github.com/gbif/ipt/issues/3166nvd
github.com/mandiant/Vulnerability-Disclosures/blob/master/2026/MNDT-2026-0017.mdnvd

News mentions

No linked articles in our index yet.

cvss	0.260
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000