CVE-2026-38472

CVE-2026-38472 is a Stored XSS in GazellePW (GazellePosterWall), a forum application, specifically at commit 86c4bedf727691b5a97af42a4864869d18446449. Remote attackers can inject arbitrary JavaScript via the c parameter in /forums.php?action=ajax_get_jf (forum reward comments). The payload is lat...