A vulnerability classified as problematic was found in loft-sh loft up to 4.4.2/4.5.4/4.6.1/4.7.0. Affected by this vulnerability is an unknown functionality. Such manipulation of the argument Name leads to cross site scripting.
This vulnerability is uniquely identified as CVE-2026-42457. The attack can be launched remotely. No exploit exists.
Upgrading the affected component is advised.
Intelligence View
⚡ tsecurity.de Intelligence
CVE-2026-42457 | loft-sh loft up to 4.4.2/4.5.4/4.6.1/4.7.0 Name cross site scripting (GHSA-x7cq-v3h6-426c / EUVD-2026-30301)
A vulnerability classified as problematic was found in loft-sh loft up to 4.4.2/4.5.4/4.6.1/4.7.0. Affected by this vulnerability is an unknown functionality. Such manipulation of the argument Name leads to cross site scripting. This…
Reagiere als Erste:r — dein Feedback zählt!
SOCIAL SHARE CARD GENERATOR