CVE-2026-88742

Bacularis (versions 1.0.0 through 6.5.0) is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability in the client address field . An attacker who can inject script into this field may execute arbitrary JavaScript in the context of other users' sessions. No confirmed in-the-wild exploitat...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the client's address field. PoC " Details A cross-site scripting attack occurs when the attacker tricks a legitimate web-based application or site to accept a request as originating from a trusted source. Th...