Codepeople Search In Place vulnerabilities

2 CVEs affecting Codepeople Search In Place, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-95598, published 2026-10-09.

More from Codepeople.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-26521, published 2024-06-03. Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days. Missing Authorization vulnerability in CodePeople Search in Place allows Functionality Misuse.This issue affects Search in Place: from n/a through 1.0.104.
• CVE-2026-95598, published 2026-10-09. High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days. Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codepeople Search in Place search-in-place allows Reflected XSS.This issue affects Search in…