EUVD-2026-85015

A vulnerability has been found in onSite internet GmbH Auktion NG Auktionssoftware up to 20260722. This affects an unknown part of the file /forgotpasswd.html of the component Public Password Reset Endpoint. The manipulation of the argument email leads to cross site scripting. The attack is...

CVE-2026-96258

A cross-site scripting (XSS) vulnerability exists in the Public Password Reset Endpoint of onSite internet GmbH Auktion NG Auktionssoftware (versions up to 20260722). The flaw is located within the /forgotpasswd.html file, where manipulating the email argument allows for remote execution of the a...