Threats tagged 'ghsa-qgq3-gccq-65hq'

CVE-2026-28178 is a medium severity cross-site scripting (XSS) vulnerability affecting codesupplyco Powerkit versions up to and including 3.1.0. This vulnerability involves improper neutralization of input during web page generation, which could allow an attacker with limited privileges to execute script code in the context of another user. No official patch or remediation guidance is currently available from the vendor. There are no known exploits in the wild at this time.