PT-2026-45463
CVE-2026-42676
·
Published
2026-05-15
·
Updated
2026-06-01
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions
myCred versions prior to 3.0.5
Description
Improper neutralization of input during web page generation allows for stored Cross-site Scripting (XSS), a condition where malicious scripts are permanently stored on the target server and executed in the browser of users who view the affected page.
Recommendations
Update to a version newer than 3.0.4.
Found an issue in the description? Have something to add? Feel free to write us 👾