CVE-2026-67175
MEDIUM
NVD
CVSS Score
4.6
Severity
MEDIUM
Published
Nov 10, 2026
Vendor
unknown
Description
Chargemap contains a stored cross-site scripting vulnerability that allows a remote, authenticated attacker to craft a malicious payload in the user profile page that executes when another user views the attacker's profile. Fixed 2026-07-17.