CVE-2026-50592CWE-79cross-site-scripting

CVE-2026-50592

Medium · published June 5, 2026

CVSS v3.1
6.4
EPSS
0%
Percentile
15.1
In the wild
Unconfirmed
What it is

In Znuny LTS before 6.5.21 and Znuny before 7.3.3, there is reflected XSS in

AdminCommunicationLog (aka the communication log administration view).

The record
Technical detail
CVSS v3.1
6.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00247 · 15.1th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2026-06-05T06:17Z
References (1)
https://www.znuny.org/en/advisories/zsa-2026-10 · [email protected]
EPSS history
Timeline
  • 05 JUN 01:57Z
    In Znuny LTS before 6.5.21 and Znuny before 7.3.3, there is reflected XSS in AdminCommunicationLog (aka the communication log administration view)
    cvelistv5