CVE-2026-65545 Unauthenticated Cross Site Scripting (XSS) in AI Engine <= 3.6.8 versions

Description

Unauthenticated Cross Site Scripting (XSS) in AI Engine <= 3.6.8 versions.

Affected products and versions

Product	Affected versions	Fixed in
AI Engine 3.6	earliest → 3.6.8	No fix stated

Other CVEs of AI Engine

The 3 CVEs of AI Engine →

CVE-2026-93623 Unauthenticated Insecure Direct Object References (IDOR) in AI Engine <= 3.7.8 versions 5.3 Medium CVE-2026-23802 Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine ai-engine allows Using Malicious… 9.1 Critical