CVE-2026-7004

WIT SynApps Runtime versions through 1.4.11 are vulnerable to a pre-authentication reflected cross-site scripting (XSS) flaw. The issue is caused by insufficient neutralization of the LINK query parameter on the /System/Session-1 endpoint, allowing unauthenticated attackers to execute arbitrary J...

CVE-2026-7004 WIT SynApps Runtime 1.4.11 Reflected XSS via LINK Parameter

WIT SynApps Runtime through 1.4.11 contains a pre-authentication reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject and execute arbitrary JavaScript by submitting a crafted LINK query parameter to the /System/Session-1 endpoint. Attackers can exploit this...

EUVD-2026-114265

WIT SynApps Runtime through 1.4.11 contains a pre-authentication reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject and execute arbitrary JavaScript by submitting a crafted LINK query parameter to the /System/Session-1 endpoint. Attackers can exploit this...

CVE-2026-7004: WIT SynApps Runtime: WIT SynApps Runtime through 1.4.11 contains a pre-authentication reflected cross-site scripting vulnerability that…

WIT SynApps Runtime through 1.4.11 contains a pre-authentication reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject and execute arbitrary JavaScript by submitting a crafted LINK query parameter to the /System/Session-1 endpoint. Attackers can exploit this...