1 matches found
CVE-2026-25051 n8n Improper CSP Enforcement in Webhook Responses May Allow Stored XSS
n8n is an open source workflow automation platform. Prior to version 1.123.2, a Cross-Site Scripting XSS vulnerability has been identified in the handling of webhook responses and related HTTP endpoints. Under certain conditions, the Content Security Policy CSP sandbox protection intended to...
8.5CVSS5.5AI score
SaveExploits0References5
20