CVE-2026-90821 — Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Crafty Controller
An input neutralization vulnerability in the Webhook URL form field component of Crafty Controller allows a remote, authenticated attacker to perform stored XSS via malicious fo…
Published: 2026-10-16 · CVSS: 5.4 · CVSS 3.1
An input neutralization vulnerability in the Webhook URL form field component of Crafty Controller allows a remote, authenticated attacker to perform stored XSS via malicious form input
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7