CVE-2026-8628

Name of the Vulnerable Software and Affected Versions EntreDroppers versions prior to 1.1.3

Description Insufficient input sanitization and output escaping allow unauthenticated attackers to perform Reflected Cross-Site Scripting. This occurs when the PHP SELF parameter reflects attacker-controlled path-info from the URL directly into the form action attribute, enabling the execution of arbitrary web scripts if a user is tricked into clicking a malicious link.

Recommendations Update EntreDroppers to a version newer than 1.1.2.