CVE-2026-27057

Name of the Vulnerable Software and Affected Versions PenciDesign Penci Filter Everything versions through 1.7

Description The software contains a flaw due to improper handling of user-supplied data when creating web pages, leading to a potential Cross-site Scripting (XSS) issue. This allows for the injection of malicious scripts into web pages viewed by other users. The issue is identified as Stored XSS, meaning the malicious script is permanently stored on the target server.

Recommendations Update Penci Filter Everything to a version newer than 1.7.