4 matches found
CVE-2026-88743
Bacularis 4.7.0 - 6.5.0 is vulnerable to Stored cross-site scripting XSS in director tags...
CVE-2026-88742
Bacularis (versions 1.0.0 through 6.5.0) is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability in the client address field . An attacker who can inject script into this field may execute arbitrary JavaScript in the context of other users' sessions. No confirmed in-the-wild exploitat...
CVE-2026-88743
Bacularis (a web-based Bacula backup frontend) versions 4.7.0 through 6.5.0 are affected by a stored cross-site scripting (XSS) vulnerability in director tags . The CNA-assigned CVSS v3.1 score is 6.1 (Medium) , with a network attack vector, low complexity, no privileges required, user interactio...
