EUVD-2026-16299

A cross-site scripting XSS vulnerability in the wffcolspref.css.aspx endpoint of staffwiki v7.0.1.19219 allows attackers to execute arbitrary Javascript in the context of the user's browser via a crafted HTTP request...

WorkflowFirst StaffWiki Security Vulnerabilities

WorkflowFirst StaffWiki is an internal knowledge management and collaboration platform provided by the US company WorkflowFirst. Version 7.0.1.19219 of StaffWiki has a security vulnerability. This vulnerability stems from a cross-site scripting vulnerability present in the wff colspref.css.aspx...