CVE-2026-54191

16th percentile — higher than 16% of all known CVEs

Versions of Pods <= 3.3.8 are vulnerable to unauthenticated Cross Site Scripting (XSS). An attacker can exploit this vulnerability to inject malicious JavaScript code.

This vulnerability may lead to user data theft and session hijacking, posing a serious threat to the application's security and the organization's data.

It is recommended to upgrade to the latest version of Pods to mitigate this vulnerability and conduct a security audit of the application.