Stored XSS Vulnerability in Altium Forum for Altium 365 Users

CVE-2026-1181

What is CVE-2026-1181?

A stored cross-site scripting vulnerability exists in the Altium Forum due to inadequate server-side input sanitization in forum post content. This flaw allows an authenticated attacker to inject arbitrary JavaScript into forum posts, which is then stored and executed when other users access these posts. Successful exploitation enables the attacker’s payload to run in the context of the victim’s Altium 365 session, potentially providing unauthorized access to sensitive workspace data, including design files and settings. To be exploited, users must interact with and view the malicious forum post.

References