CVE-2026-78838 A reflected cross-site scripting (XSS) vulnerability… — CVE Notify — TG.ME

CVCVE Notify@cveNotify · 19.7K subscribersOpen in TelegramOpen

🚨 CVE-2026-78838
A reflected cross-site scripting (XSS) vulnerability in the grid_datasource.php component of AppNitro MachForm v30 allows attackers to execute arbitrary Javascript in the context of the victim's browser via injecting a crafted payload into the filter[filters][0][field] parameter.

🎖@cveNotify

GitHub

GitHub - nabeelmkhan/CVE-2026-78838

Contribute to nabeelmkhan/CVE-2026-78838 development by creating an account on GitHub.

t.me/cveNotify/288003

September 8, 2026 16