CVE-2026-44960

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description A stored Cross-Site Scripting (XSS) issue exists where usernames are used as an attack vector. When an administrator views the audit log details for affected entries, malicious JavaScript payloads embedded in the username variable are executed because of missing output sanitization.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.