CVE-2026-45710

"WidgetVariante::renderVariantList" "Core/Lib/Widget/WidgetVariante.php:298-330" and "WidgetSubcuenta::renderSubaccountList" "Core/Lib/Widget/WidgetSubcuenta.php:290-321" build the "" row for each modal hit by concatenating the user-controlled "referencia" / "codsubcuenta" field directly into a...