CVE-2026-90835

Name of the Vulnerable Software and Affected Versions michaelliao itranswarp versions prior to 2.20

Description A flaw in the Page Content Rendering component allows remote attackers to perform cross site scripting (XSS), which is a technique used to inject malicious scripts into web pages viewed by other users. The issue resides in the Markdown.toHtml() function within the Markdown.java file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.