Threats tagged 'ghsa-j9f7-pmc4-vm2c'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.1	EPSS 0.5%	CVE-2026-19434maalfer Pentestify · Cross-site Scripting Medium5.1EPSS 0.5%2026-08-11GCVE DatabaseCVE-2026-19434 A Cross-site Scripting (XSS) vulnerability exists in the finding renderer of maalfer Pentestify versions before 2.3.1. Authenticated users can inject arbitrary JavaScript via HTML markup stored in a finding's severity field, which is rendered unescaped in class and style attributes in reports. EPSS 0.5%Report on CVE-2026-19434 Vulnerability CWE-79 #ghsa-j9f7-pmc4-vm2c	GCVE Database	2026-08-11

Page 1 of 1