{"items":[{"id":"CVE-2026-9626","published":"2026-07-03T04:30:19.039Z","updated":"2026-07-06T16:35:54.457Z","title":"JSON API User <= 4.1.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'content' Parameter","severity":"MEDIUM","score":6.4,"vendor":"parorrey","product":"JSON API User","kev":false,"epss":0.00375,"kevAdded":null},{"id":"CVE-2024-6624","published":"2024-07-11T06:43:13.276Z","updated":"2026-04-08T17:13:06.826Z","title":"JSON API User <= 3.9.3 - Unauthenticated Privilege Escalation","severity":"CRITICAL","score":9.8,"vendor":"parorrey","product":"JSON API User","kev":false,"epss":0.0287,"kevAdded":null}]}