EUVD-2026-124013

NextScan 1.1.0 through 1.2.0 contains a stored cross-site scripting vulnerability in the ns-admin URL asset detail dialog that renders crawled form request bodies AssetURL.data via innerHTML without encoding. Attackers can host crafted forms on crawled sites to store JavaScript that executes when...

CVE-2026-126798

NextScan versions 1.1.0 through 1.2.0 are vulnerable to a stored cross-site scripting (XSS) flaw in the ns-admin URL asset detail dialog . The vulnerability occurs because the application renders crawled form request bodies (Asset_URL.data) using innerHTML without proper encoding. An attacker can...