CVE-2026-71802

A stored Cross-Site Scripting (XSS) vulnerability exists in the announcement preview component of REBUILD 4.4.3 . While the server performs HTML escaping on announcement content, the client-side preview code uses jQuery's html().text() method to reverse those escapes before injecting the result i...