Larsdrasmussen Rexcrawler vulnerabilities

• larsdrasmussen rexcrawler rexCrawler <= 1.0.15 - Authenticated (Administrator+) Stored Cross-Site Scripting via Settings CVE-2026-2280 4.8 MediumMay 27, 2026
• larsdrasmussen rexcrawler rexCrawler <= 1.0.15 - Reflected Cross-Site Scripting via 'url' and 'regex' Parameters CVE-2026-2277 6.1 MediumMarch 21, 2026