CVE-2026-76203

Name of the Vulnerable Software and Affected Versions maalfer Pentestify versions 1.2.0 through 2.3.2

Description The report theme CSS sanitizer contains an incorrect behavior order where validation occurs before canonicalization. This allows an authenticated user to bypass the sanitizer blocklist using CSS hex escapes to reconstruct the url() function. Consequently, this can be used to force outbound HTTP requests from the browsers of other users, leading to the disclosure of their IP addresses and User-Agent strings.

Recommendations Update maalfer Pentestify to a version later than 2.3.2.