CVE-2026-4794 in PaperCut NG
摘要 (英语)
Multiple cross-site scripting (XSS) vulnerabilities in PaperCut NG/MF before 25.0.10 allow authenticated administrator users to inject arbitrary web script or HTML code via different UI fields. This could be used to compromise other admininistrator's sessions or perform unauthorized actions via the administrator's authenticated context (e.g. requires an active login session).
负责
PaperCut
预定
2026-03-25
披露
2026-03-31
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 354321 | PaperCut NG/MF 跨网站脚本 | 79 | 未定义 | 官方修复 | CVE-2026-4794 |