PT-2026-68913 · Webbox+1 · Webbox+1

·

CVE-2026-54217

·

Published

2026-08-07

·

Updated

2026-08-07

CVSS v4.0

5.3

Medium

VectorAV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
Name of the Vulnerable Software and Affected Versions TeamDavid versions prior to Rollout 525
Description The Webbox application is susceptible to stored cross-site scripting (XSS), a flaw where malicious scripts are permanently stored on the target server. An attacker can exploit this by sending an email containing malicious JavaScript code, which is then executed when a user opens the email.
Recommendations Update TeamDavid to a version later than Rollout 524.

Exploit

Fix

RCE

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-54217

Affected Products

Teamdavid
Webbox