PT-2026-46899

CVE-2026-50592

·

Published

2026-06-05

·

Updated

2026-10-06

Description by

CVSS 3.1
6.4
Medium
MetricsAV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Znuny LTS versions prior to 6.5.21 Znuny versions prior to 7.3.3
Description Reflected Cross-Site Scripting (XSS) exists in the communication log administration view 'AdminCommunicationLog'. Reflected XSS occurs when an application receives data in an HTTP request and includes that data within the immediate response in an unsafe way.
Recommendations Update Znuny LTS to version 6.5.21 or later. Update Znuny to version 7.3.3 or later.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-79: Improper Neutralization of Input During Web Page Generation (\'Cross-site Scripting\')
Related identifiers
CVE-2026-50592
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com