CVE-2026-50591 MEDIUM

CVE-2026-50591

Vendor Znuny
Product Znuny
Weakness CWE-79 · XSS
Published June 5, 2026
Last update June 5, 2026
View on NVD All CVEs

CVSS base score

5.4/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction Required
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

What the vulnerability does

01Description

In Znuny LTS before 6.5.21 and Znuny before 7.3.3, XSS can occur via stored user preferences.

Key dates

02Disclosure timeline

June 5, 2026 CVE published
June 5, 2026 Record updated

Related vulnerabilities

04Related CVE

CVE-2017-16774 CVE-2024-29797 WordPress Grid Shortcodes plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability CVE-2023-22702 WordPress WPMobile.App — Android and iOS Mobile Application Plugin <= 11.13 is vulnerable to Cross Site Scripting (XSS) CVE-2024-4334 Supreme Modules Lite – Divi Theme, Extra Theme and Divi Builder <= 2.5.3 - Authenticated (Contributor+) DOM-Based Cross-Site Scripting CVE-2024-11102 SourceCodester Hospital Management System edit-doc.php cross site scripting