PT-2026-56431 · Cap Go · Cap-Go
CVSS v3.1
5.4
Medium
| Vector | AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Capgo versions prior to 12.128.2
Description
An HTML injection issue exists in the organization settings endpoint. Attackers can inject malicious HTML content by crafting payloads in the
organization name field, which can be used to redirect users to untrusted websites, facilitating phishing attacks and causing reputational damage.Recommendations
Update to version 12.128.2 or later.
Exploit
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Cap-Go