CVE-2026-88743

Bacularis (a web-based Bacula backup frontend) versions 4.7.0 through 6.5.0 are affected by a stored cross-site scripting (XSS) vulnerability in director tags . The CNA-assigned CVSS v3.1 score is 6.1 (Medium) , with a network attack vector, low complexity, no privileges required, user interactio...