CVE-2026-129430

Axeloz Filesharing versions prior to 2.14.3 are vulnerable to a Stored Cross-Site Scripting (XSS) vulnerability. The root cause is the improper neutralization of input when authenticated users store raw HTML or javascript: Markdown links in bundle descriptions. When recipients view the public bun...