CVE-2026-32571 Subscriber Cross Site Scripting (XSS) in Ohio Extra <= 3.6.8 versions

Description

Subscriber Cross Site Scripting (XSS) in Ohio Extra <= 3.6.8 versions.

Affected products and versions

Product	Affected versions	Fixed in
Ohio Extra 3.6	earliest → 3.6.8	No fix stated

Other CVEs of Ohio Extra

The 3 CVEs of Ohio Extra →

CVE-2025-64365 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in colabrio Ohio… 6.5 Medium CVE-2025-26924 Improper Control of Generation of Code ('Code Injection') vulnerability in colabrio Ohio Extra ohio-extra allows Code… 6.5 Medium