2 matches found
CVE-2026-1008
A stored cross-site scripting XSS vulnerability exists in the user profile text fields of Altium 365. Insufficient server-side input sanitization allows authenticated users to inject arbitrary HTML and JavaScript payloads using whitespace-based attribute parsing bypass techniques. The injected...
5.4CVSS5.7AI score0.00216EPSS
SaveExploits0References1
CVE-2026-1008 Stored Cross-Site Scripting in Altium Live User Profile Fields
A stored cross-site scripting XSS vulnerability exists in the user profile text fields of Altium 365. Insufficient server-side input sanitization allows authenticated users to inject arbitrary HTML and JavaScript payloads using whitespace-based attribute parsing bypass techniques. The injected...
7.6CVSS0.00216EPSS
SaveExploits0References1
20