Threats affecting pkg:github/migration-planner-ui-app

CVE-2026-53473 is a cross-site scripting (XSS) vulnerability in migration-planner-ui-app that allows an attacker to register a malicious discovery agent with a crafted credentialUrl containing JavaScript code. When an organizational user clicks this link, the malicious script executes in the user's browser, compromising their Red Hat Single Sign-On (SSO) session. This can lead to unauthorized cross-tenant data access and API actions. The vulnerability affects versions prior to 0.13.5 and has a high severity rating with a CVSS score of 7.3.