Vinades Nukeviet vulnerabilities

• nukeviet NukeViet CMS: Stored Cross-Site Scripting (XSS) via insufficient server-side input sanitization in Request class CVE-2026-41147 8.7 HighMay 15, 2026
• nukeviet Vinades NukeViet Module index.php server-side request forgery CVE-2025-8772 5.3 MediumAugust 9, 2025