CVE-2026-54615

The open source inventory management system Part-DB is vulnerable to stored cross-site scripting (XSS) and HTML injection prior to version 2.12.1 . The root cause is a sanitizer gap in LogEntryExtraFormatter::getInternalFormat() where the CollectionElementDeleted branch fails to escape getOldName...