1 matches found
CVE-2026-54303: Improper Neutralization of Input During Web Page Generation
n8n is an open source workflow automation platform. Prior to 2.24.0, an endpoint in the Meta and Microsoft Teams trigger nodes reflects a query parameter into the HTTP response without sanitization or Content-Security-Policy headers, enabling reflected XSS in the n8n origin when a logged-in user...
6.8CVSS5.8AI score0.00231EPSS
SaveExploits0References3
20