CVE Catalog
CVE-2026-50591
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk0.13%
3th percentile - higher than 3% of all known CVEs
Summary
Cross-Site Scripting (XSS) vulnerability in Znuny LTS before 6.5.21 and Znuny before 7.3.3 via stored user preferences.
Risk Assessment
An attacker can inject malicious script into user preferences, which executes in other users' browsers, leading to session theft or data theft.
Recommendation
Update Znuny to version 6.5.21 (LTS) or 7.3.3 (or later).
Other vulnerabilities in Znuny
See allOriginal NVD description (English source)
In Znuny LTS before 6.5.21 and Znuny before 7.3.3, XSS can occur via stored user preferences.