Stored XSS Vulnerability in Audit Log for Affected Product by Vendor

CVE-2026-44960

What is CVE-2026-44960?

A stored XSS vulnerability exists in the audit log feature of the affected product, where an attacker can exploit the system by embedding malicious JavaScript in usernames. When an admin reviews the audit log for specific entries, the embedded script is executed due to improper output sanitization. This can lead to unauthorized actions performed through the browser, compromising security. The vendor has addressed this issue by implementing proper escaping to prevent such attacks.

References