https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 08:12:16 +0000 https://vulnerability.circl.lu/vuln/cve-2026-66919 <p><strong>Affected:</strong> Pivotick</p> <p>Pivotick contains a cross-site scripting vulnerability in the inspect and edit node modals. Node labels and descriptions originating from graph data were interpolated directly into HTML used to construct the modal headers.</p> <p>An attacker able to supply or modify graph data could insert a malicious HTML or JavaScript payload into a node’s label or description. The payload would be parsed and executed in the application’s origin when a user opened the affected node’s inspect or edit modal.</p> <p>Successful exploitation could allow the attacker to access information available to the victim, modify application data, or perform actions using the victim’s active session.</p> <p>The vulnerability has been addressed by creating the modal elements without embedding graph data in HTML and assigning node labels and descriptions through textContent.</p> <p><strong>Affected:</strong> Pivotick</p> <p>Pivotick contains a cross-site scripting vulnerability in the inspect and edit node modals. Node labels and descriptions originating from graph data were interpolated directly into HTML used to construct the modal headers.</p> <p>An attacker able to supply or modify graph data could insert a malicious HTML or JavaScript payload into a node’s label or description. The payload would be parsed and executed in the application’s origin when a user opened the affected node’s inspect or edit modal.</p> <p>Successful exploitation could allow the attacker to access information available to the victim, modify application data, or perform actions using the victim’s active session.</p> <p>The vulnerability has been addressed by creating the modal elements without embedding graph data in HTML and assigning node labels and descriptions through textContent.</p> https://vulnerability.circl.lu/vuln/cve-2026-66919