CVE-2026-95166

In Bacularis v1.0.0 - 6.5.1 when adding a new pool, the LabelFormat field allows for a Cross Site Scripting XSS payload...

PT-2026-106194

In Bacularis v1.0.0 - 6.5.1 when adding a new pool, the LabelFormat field allows for a Cross Site Scripting XSS payload...

CVE-2026-95166

Bacularis versions v1.0.0 - 6.5.1 are vulnerable to a Cross Site Scripting (XSS) vulnerability. This occurs when a user adds a new pool, as the LabelFormat field fails to properly neutralize input, allowing for the execution of an XSS payload . Exploitation details and specific remediation steps ...

CVE-2026-95166

In Bacularis v1.0.0 - 6.5.1 when adding a new pool, the LabelFormat field allows for a Cross Site Scripting XSS payload...

EUVD-2026-92702

In Bacularis v1.0.0 - 6.5.1 when adding a new pool, the LabelFormat field allows for a Cross Site Scripting XSS payload...

CVE-2026-95166

In Bacularis v1.0.0 - 6.5.1 when adding a new pool, the LabelFormat field allows for a Cross Site Scripting XSS payload...

CVE-2026-95166

In Bacularis v1.0.0 - 6.5.1 when adding a new pool, the LabelFormat field allows for a Cross Site Scripting XSS payload...

CVE-2026-95166: Improper Neutralization of Input During Web Page Generation

In Bacularis v1.0.0 - 6.5.1 when adding a new pool, the LabelFormat field allows for a Cross Site Scripting XSS payload...