CVE-2026-24601

Name of the Vulnerable Software and Affected Versions PenciDesign Penci Pay Writer versions through 1.5

Description The Penci Pay Writer software contains a flaw related to improper input handling during web page creation, which allows for Stored Cross-site Scripting (XSS). This means that malicious scripts can be injected into web pages and executed by other users who view those pages. The affected component is the penci-pay-writer.

Recommendations Versions prior to 1.5 should be updated to address this issue.