CVE-2026-90821

LOWCVSS 5.4 · MEDIUM

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

An input neutralization vulnerability in the Webhook URL form field component of Crafty Controller allows a remote, authenticated attacker to perform stored XSS via malicious form input

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://gitlab.com/crafty-controller/crafty-4/-/work_items/745

Weakness type (CWE)

CWE-79

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Deep dive

Full discourse1 post

CVE@CVEnew1d
CVE-2026-90821 An input neutralization vulnerability in the Webhook URL form field component of Crafty Controller allows a remote, authenticated attacker to perform stored XSS via m… https://www.cve.org/CVERecord?id=CVE-2026-90821
00000971
58.2K followersView on X

Explore more

Back to dashboard