CVE-2026-126778

The software Wallos 4.4.0 before 5.10.3 is vulnerable to a stored cross-site scripting (XSS) flaw in the endpoints/cronjobs/sendnotifications.php component. The root cause is the application's failure to escape notification service responses. A registered user can inject malicious scripts by poin...