Threats tagged 'ghsa-9j7x-qm62-f4xh'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	4.8	CVE-2026-123539OpenAM before 16.1.4 contains a stored cross-site scripting vulnerability that allows privileged attackers to inject Medium4.82026-11-08GCVE DatabaseCVE-2026-123539 OpenAM versions before 16.1.4 have a stored cross-site scripting (XSS) vulnerability that allows privileged attackers to inject malicious scripts via a user's display name. When a victim views the OAuth 2.0 / OpenID Connect consent page, the injected script executes and can steal the victim's OpenAM session cookie, enabling user impersonation. Report on CVE-2026-123539 Vulnerability CWE-79 #ghsa-9j7x-qm62-f4xh	GCVE Database	2026-11-08

Page 1 of 1