CVE-2026-125454

Name of the Vulnerable Software and Affected Versions Passster versions prior to 4.3.22

Description Insufficient input sanitization and output escaping lead to Stored Cross-Site Scripting (XSS), a condition where malicious scripts are permanently stored on the target server. Authenticated attackers with contributor-level access or higher can inject arbitrary web scripts into pages, which then execute when a user accesses the affected page.

Recommendations Update Passster to version 4.3.22 or later.