CVE-2026-7175

Status: Received

Description

CVE-2026-7175: the Business Name parameter in the /promoters/edit endpoint of the My Profile section of a promoter’s profile, which allows the injection of JavaScript code that will execute on the promoter’s public page;

Published
October 1, 2026 10:17 AM
Last Modified
October 1, 2026 10:17 AM
Source
[email protected]

Weaknesses (CWE)

CWE-79

References

Contact Us

Get the CyboWatch SIEM platform, hosting, and 24×7 SOC analysts. Call or email us to get started.