Skip to content
Sign in
6.5 Medium

CVE-2026-27440 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saad Iqbal…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saad Iqbal myCred mycred allows Stored XSS.This issue affects myCred: from n/a through <= 2.9.7.6.

Affected products and versions

Product Affected versions Fixed in
myCred 2.9 earliest → 2.9.7.6 No fix stated

Other CVEs of myCred

The 11 CVEs of myCred →
CVE-2026-61968 Missing Authorization vulnerability in Saad Iqbal myCred mycred allows Exploiting Incorrectly Configured Access… 5.4 Medium CVE-2026-24951 Missing Authorization vulnerability in Saad Iqbal myCred mycred allows Exploiting Incorrectly Configured Access… 4.3 Medium CVE-2025-54668 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saad Iqbal… 6.5 Medium CVE-2025-54667 Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Saad Iqbal myCred mycred allows Leveraging… 5.3 Medium
Track this CVE