Lucene search
+L

2 matches found

OSV
OSV
added 2026/05/26 5:43 p.m.9 views

CVE-2026-44669 Faction: Stored XSS in Assessment Attachment Filename Preview Rendering

FACTION is a PenTesting Report Generation and Collaboration Framework. Prior to 1.8.3, Faction is vulnerable to stored cross-site scripting XSS via attachment filenames in assessment file preview flows. User-supplied filename values are persisted and later rendered into HTML/attribute contexts...

8.7CVSS5.9AI score
SaveExploits0References4
Rows per page
Query Builder