CVE-2026-90821
MEDIUM
NVD
CVSS Score
5.4
Severity
MEDIUM
Published
Oct 16, 2026
Vendor
unknown
Description
An input neutralization vulnerability in the Webhook URL form field component of Crafty Controller allows a remote, authenticated attacker to perform stored XSS via malicious form input