CVE-2026-54216: Improper Neutralization of Input During Web Page Generation

Tobit Laboratories AG TeamDavid's Webbox application contains a reflected cross-site scripting XSS vulnerability. By sending a specially crafted link including an arbitrary path, an XSS payload or the parameter “EntryInfo”, and the parameter “!templateName=entryMail”, an attacker can cause the...

PT-2026-68912

Name of the Vulnerable Software and Affected Versions TeamDavid versions prior to Rollout 525 Description The Webbox application contains a reflected cross-site scripting XSS flaw. An attacker can execute a malicious payload in a victim's browser by sending a specially crafted link. This is...