← Database

CVE-2026-68541

N/A CVSS: N/A Published: 2026-11-13 Modified: 2026-11-13

Description

PolicyPress is a compliance policy management tool for small and mid-size teams. Prior to version 1.4.1, sensitive content is disclosed via CSS-only web redaction and insecure starter workflow defaults. This issue has been patched in version 1.4.1.

Affected Platforms

Unknown

Weakness Type

CWE-200, CWE-390

References