Skip to content
Sign in
6.5 Medium

CVE-2026-48196 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kaliforms Kali…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kaliforms Kali Forms kali-forms allows Stored XSS.This issue affects Kali Forms: from n/a through 2.4.27.

Affected products and versions

Product Affected versions Fixed in
Kali Forms 2.4 earliest → 2.4.27 No fix stated

Other CVEs of Kali Forms

The 3 CVEs of Kali Forms →
CVE-2026-39782 Missing Authorization vulnerability in Kaliforms Kali Forms kali-forms allows Exploiting Incorrectly Configured Access… 5.3 Medium CVE-2026-42703 Missing Authorization vulnerability in Kaliforms Kali Forms kali-forms allows Exploiting Incorrectly Configured Access… 6.5 Medium
Track this CVE