Threats tagged 'ghsa-cfrm-m96r-rwgj'

A reflected cross-site scripting (XSS) vulnerability exists in Kulga News Software versions from 26.7.4 up to but not including 26.10.0. This flaw is due to improper neutralization of input during web page generation, which can lead to the execution of malicious scripts in a user's browser. The vulnerability has a medium severity rating with a CVSS score of 6.1.