← Database

CVE-2026-90821

MEDIUM CVSS: 5.4 Published: 2026-10-16 Modified: 2026-10-16

Description

An input neutralization vulnerability in the Webhook URL form field component of Crafty Controller allows a remote, authenticated attacker to perform stored XSS via malicious form input

Affected Platforms

Unknown

Weakness Type

CWE-79

References