CVE-2026-54216

Name of the Vulnerable Software and Affected Versions TeamDavid versions prior to Rollout 525

Description The Webbox application contains a reflected cross-site scripting (XSS) flaw. An attacker can execute a malicious payload in a victim's browser by sending a specially crafted link. This is achieved by including an arbitrary path, an XSS payload or the EntryInfo parameter, and the !templateName=entryMail parameter.

Recommendations Update TeamDavid to a version later than Rollout 524. Avoid using the EntryInfo parameter and the !templateName=entryMail parameter in the Webbox application until the update is applied.