CVE-2026-29969

The WorkflowFirst StaffWiki internal knowledge management platform, specifically version 7.0.1.19219 , is vulnerable to a cross-site scripting (XSS) flaw. The root cause is the improper neutralization of input during web page generation within the wff_cols_pref.css.aspx endpoint. This allows an a...