10 matches found
CVE-2026-71802: Improper Neutralization of Input During Web Page Generation
A stored Cross-Site Scripting XSS vulnerability exists in the announcement preview component of REBUILD 4.4.3. Although the announcement content undergoes HTML escaping on the server side, the client-side preview code reverses the escaped entities using jQuery's html.text method and subsequently...
5.4CVSS6.2AI score0.00226EPSS
SaveExploits0References2
20