CVE-2026-44960 — NONE (0.0)

Vulnerability Description

A stored XSS can be exploited by leveraging the usernames as an attack vector. When an admin user viewed the audit log details for affected entries, any malicious JavaScript payload embedded in the username would be executed due to missing output sanitisation. Proper escaping has been added to the audit log details output.

CVSS Score

0.0

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

NONE

Availability

NONE

Related Weaknesses (CWE)

CWE-79

References

https://hackerone.com/reports/3680090

FAQ

What is CVE-2026-44960?

CVE-2026-44960 is a vulnerability with a CVSS score of 0.0 (NONE). A stored XSS can be exploited by leveraging the usernames as an attack vector. When an admin user viewed the audit log details for affected entries, any malicious JavaScript payload embedded in the us...

How severe is CVE-2026-44960?

CVE-2026-44960 has been rated NONE with a CVSS base score of 0.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-44960?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.