HTML Injection Vulnerability in Capgo Product by Capgo

CVE-2026-56283

What is CVE-2026-56283?

Capgo versions earlier than 12.128.2 are susceptible to an HTML injection vulnerability that affects the organization settings endpoint. This flaw allows attackers to insert malicious HTML content into the organization name field. By exploiting this vulnerability, attackers can redirect users to untrusted websites. Such attacks can facilitate phishing attempts and cause significant reputational harm for organizations using the affected versions.

References