CVE-2026-50591CWE-79cross-site-scripting

CVE-2026-50591

Medium · published June 5, 2026

CVSS v3.1
5.4
EPSS
0%
Percentile
12.6
In the wild
Unconfirmed
What it is

In Znuny LTS before 6.5.21 and Znuny before 7.3.3, XSS can occur via stored user preferences.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00226 · 12.6th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2026-06-05T06:17Z
References (1)
https://www.znuny.org/en/advisories/zsa-2026-11 · [email protected]
EPSS history
Timeline
  • 05 JUN 01:52Z
    In Znuny LTS before 6.5.21 and Znuny before 7.3.3, XSS can occur via stored user preferences
    cvelistv5