CVE-2026-6179CWE-79

Stored Cross Site Scripting in NightWolf Penetration Testing Platform

Medium · published April 13, 2026

CVSS v4.0
6.3
EPSS
0%
Percentile
12.6
In the wild
Unconfirmed
What it is

Stored Cross Site Scripting in NightWolf Penetration Testing Platform allows attack trigger and run malicious script in user's browser

The record
Technical detail
CVSS v4.0
6.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:H/SI:N/SA:N
EPSS
0.00226 · 12.6th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2026-04-13T02:27Z
EPSS history
Timeline
  • 13 APR 02:27Z
    Stored Cross Site Scripting in NightWolf Penetration Testing Platform
    cvelistv5