CVE-2026-32556

Boost versions up to 2.0.4 are vulnerable to an unauthenticated Cross Site Scripting (XSS) attack, allowing attackers to inject malicious scripts into web pages viewed by users. This vulnerability can lead to session hijacking, data theft, or other malicious activities affecting users of the affected products. Organizations using Boost should prioritize patching or upgrading to mitigate potential exploitation risks.