Cross-Site Scripting Vulnerability in WebDyne by ASPEER
CVE-2026-78190

Currently unrated

Key Information:

Status
Vendor
CVE Published:
31 October 2026

What is CVE-2026-78190?

The WebDyne product from ASPEER has a vulnerability that allows attackers to exploit unescaped request parameters in form field values. Specifically, in versions prior to 3.022, certain input fields can be manipulated to inject malicious scripts, providing an attack vector through crafted links. The default configuration, which does not escape these values, exacerbates the issue. Users are advised to upgrade to version 3.022 or later to mitigate this risk.

References

https://metacpan.org/release/ASPEER/WebDyne-3.022/changes
release-notes

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.