CVE-2026-51144 is a Cross Site Scripting (CWE-79) vulnerability affecting Soliton Systems MailZen Management Portal versions 2.62 and 2.63. The flaw allows remote attackers to execute arbitrary code by injecting malicious scripts into user input fields including Role Name, First Name, Last Name, and Username. The vulnerability is remotely exploitable without privileges but requires user interaction. The CVSS 3.1 base score is 6.1, indicating medium severity with low attack complexity and no privileges required. No vendor advisory or patch information is currently provided.

Successful exploitation could allow an attacker to execute arbitrary code in the context of the affected application, potentially leading to information disclosure or manipulation of user sessions. The impact is limited to confidentiality and integrity with no direct availability impact. The vulnerability requires user interaction to exploit.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution when handling input in the affected fields and consider applying any available input validation or filtering controls as a temporary mitigation.