CVE-2026-95166

In Bacularis versions v1.0.0 - 6.5.1 , a Cross-Site Scripting (XSS) vulnerability exists within the LabelFormat field. This flaw occurs specifically when a user is adding a new pool , where the application fails to properly neutralize the input, allowing for the execution of an XSS payload . No s...