SEPTEMBER 18, 2026
Live Feed
Back to database
Case File

CVE-2026-66638

MEDIUM · CVSS 6.5 EPSS 0.21%

Source: NVD + CISA KEV + EPSS · Published 2026-08-18 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

A Cross Site Scripting (XSS) vulnerability exists in the Frontend Admin component of DynamiApps versions up to 3.29.10, allowing attackers to inject malicious scripts into web pages viewed by users. This can lead to unauthorized access to sensitive information or session hijacking. Organizations using affected versions should prioritize remediation to safeguard against potential exploitation.

CVE
CVE-2026-66638
Severity
MEDIUM
CVSS
6.5
EPSS
0.21%

Original NVD Description

Contributor Cross Site Scripting (XSS) in Frontend Admin by DynamiApps <= 3.29.10 versions.