CVE-2026-103445

CVE-2026-103445: Stored XSS through PageForms autoedit Reporter: Marco Paciaroni BomboBombone. PageForms used the redirect parameter as a generated link's href without rejecting executable schemes. An editor with ordinary page-edit permission could save a javascript: URL that ran when a visitor...