HIGH Published Oct 6, 2026 CVE-2026-104394 CVE-2026-104394 published: Unauthenticated Cross Site Scripting (XSS) in Charitable <= 1.8.12.3 versions. View full NVD advisory → Related reading How CVE Scoring Works: Understanding CVSS Severity Ratings ← Back to CVE watch