Threats tagged 'ghsa-3mx4-f6m3-9f3g'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.1	EPSS 0.3%	CVE-2026-78318Apache Syncope · Cross-site Scripting Medium6.1EPSS 0.3%2026-09-14GCVE DatabaseCVE-2026-78318 Apache Syncope versions 4.0.4 through 4.0.7 and 4.1.0-M0 through 4.1.2 contain a cross-site scripting (XSS) vulnerability. This issue arises from improper neutralization of input during web page generation, allowing malicious HTML and JavaScript to be injected via notification messages on Console's and Enduser's login pages. The vulnerability is fixed in versions 4.0.8 and 4.1.3. EPSS 0.3%Report on CVE-2026-78318 Vulnerability CWE-79 #ghsa-3mx4-f6m3-9f3g	GCVE Database	2026-09-14

Page 1 of 1