Beveiligingsadvies

CVE-2026-19744

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-08-13 15:41:00

Laatst bijgewerkt 2026-08-14 08:04:21

Toegewezen door Secur0

CVSS-score 5.1

Status PUBLISHED

Beschrijving

Cross-site Scripting in the Markdown renderer in maalfer Pentestify before 2.3.2 allows authenticated users to execute arbitrary JavaScript in the application origin via a Markdown link whose URL contains a double quote, which closes the anchor's href attribute because the renderer's sanitization step does not escape quotes

← Alle CVE's bekijken Bekijk op cve.org ↗