CVE-2026-51144 is a Cross Site Scripting vulnerability affecting Soliton Systems MailZen Management Portal versions 2.62 and 2.63. The vulnerability arises from improper input sanitization in the Role Name, First Name, Last Name, and Username fields, enabling remote attackers to inject and execute arbitrary scripts. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, and scope changed, with limited confidentiality and integrity impact and no availability impact.

Successful exploitation could allow an attacker to execute arbitrary code in the context of the affected application, potentially leading to limited confidentiality and integrity breaches. The vulnerability does not impact availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider restricting user input in the affected fields or applying web application firewall rules to detect and block malicious script payloads targeting these inputs.