CVE-2026-65473

MediumCVSS 6.5

Published: 23/07/2026(UTC)Updated: 23/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Summary

The Virtue/Ascend/Pinnacle Toolkit plugin version 4.9.12 and earlier is vulnerable to XSS attacks from a contributor role. A user with contributor privileges can inject a malicious script.

Risk Assessment

The risk includes potential script execution in an administrator's or other users' browser, which could lead to session theft or content modification.

Recommendation

It is recommended to update the Virtue/Ascend/Pinnacle Toolkit plugin to a version above 4.9.12 that includes an XSS fix.

Other vulnerabilities in Virtue/Ascend/Pinnacle Toolkit

CVE-2026-97266Medium
Cross Site Scripting (XSS) vulnerability in Virtue/Ascend/Pinnacle Toolkit versions up to 4.9.12.1, exploitable by a contributor.

Original NVD description (English source)

Contributor Cross Site Scripting (XSS) in Virtue/Ascend/Pinnacle Toolkit <= 4.9.12 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS