CVE Catalog
CVE-2026-50592
MediumCVSS 6.4Exploitation Probability (EPSS)
Low risk0.15%
4th percentile - higher than 4% of all known CVEs
Summary
In Znuny LTS before 6.5.21 and Znuny before 7.3.3, there is reflected XSS in AdminCommunicationLog (communication log administration view).
Risk Assessment
An attacker can inject malicious script that executes in the admin's browser, potentially leading to admin session hijacking.
Recommendation
Update Znuny to LTS 6.5.21 or later, or Znuny 7.3.3 or later. Restrict access to the admin panel.
Other vulnerabilities in Znuny
See allOriginal NVD description (English source)
In Znuny LTS before 6.5.21 and Znuny before 7.3.3, there is reflected XSS in AdminCommunicationLog (aka the communication log administration view).