CVE-2026-90821

CVE-2026-90821 published: An input neutralization vulnerability in the Webhook URL form field component of Crafty Controller allows a remote, authenticated attacker to perform stored XSS via malicious form input

View full NVD advisory → ← Back to CVE watch