CVE-2026-78391

RansomLook contains a stored XSS in its cryptocurrency wallet detail view. Untrusted cryptocurrency addresses and blockchain names—sourced from external feeds such as the public ransomwhe.re crowd-sourcing feed—were stored without sufficient validation and rendered inside an inline JavaScript onc...