Threats tagged 'ghsa-492q-f4p6-w72v'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.4%	CVE-2026-90848Governikus AusweisApp · Cross-site Scripting Medium5.3EPSS 0.4%2026-09-15GCVE DatabaseCVE-2026-90848 A cross-site scripting (XSS) vulnerability exists in Governikus AusweisApp versions up to 2.5.4 in the StartPAOSResponse Handler component. The flaw arises from manipulation of the ResultMessage argument, allowing remote attackers to execute script code. Upgrading to version 2.5.5 resolves this issue. EPSS 0.4%Report on CVE-2026-90848 Vulnerability CWE-79 #ghsa-492q-f4p6-w72v	GCVE Database	2026-09-15

Page 1 of 1