CVE-2026-57381

Name of the Vulnerable Software and Affected Versions Property Hive versions prior to 2.2.4

Description Insufficient input sanitization and output escaping lead to Cross-Site Scripting (XSS), allowing attackers to inject arbitrary web scripts into pages. This issue manifests as both Reflected XSS, where scripts are reflected off a web application to the user's browser, and Stored XSS, where scripts are permanently stored on the server and executed when a user accesses the affected page. Unauthenticated attackers can exploit this to execute scripts in the context of a user's session.

Recommendations Update to a version newer than 2.2.3.