The vulnerability identified as CVE-2026-22469 affects mwtemplates DeepDigital versions up to 1.0.2. It is caused by improper neutralization of script-related HTML tags in web pages, which leads to a basic cross-site scripting (XSS) vulnerability. This allows an attacker to inject malicious code into the web interface, potentially impacting the confidentiality of data viewed by users. The CVSS v3.1 base score is 5.3, with the vector indicating network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, and low confidentiality impact. There is no vendor advisory or patch information available, and no known exploits have been reported.

The vulnerability allows code injection via script-related HTML tags, which can lead to the disclosure of information to an attacker (confidentiality impact). There is no indication of integrity or availability impact. The attack can be performed remotely without authentication or user interaction. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider applying input validation or output encoding controls on affected web pages to mitigate XSS risks. Monitor vendor channels for updates or patches addressing this vulnerability.