CVE-2026-50591: XSS
Published Jun 5, 2026
·Updated
In Znuny LTS before 6.5.21 and Znuny before 7.3.3, XSS can occur via stored user preferences.
Affected Software
2 affected components
Znuny Znuny LTS<6.5.21
Znuny Znuny<7.3.3
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Znuny LTSto a version that resolves this vulnerability.Fixed in 6.5.21 - Upgrade
Upgrade
Znunyto a version that resolves this vulnerability.Fixed in 7.3.3
Event History
Jun 5, 2026
CVE Published
via MITRE·01:52 AM
Data Sourced
via MITRE·01:52 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-50591?
CVE-2026-50591 has a medium severity rating of 5.4.
2
How does CVE-2026-50591 exploit cross-site scripting?
CVE-2026-50591 allows for cross-site scripting through stored user preferences in affected Znuny versions.
3
Which versions of Znuny are affected by CVE-2026-50591?
CVE-2026-50591 affects Znuny LTS before version 6.5.21 and Znuny before version 7.3.3.
4
What is the impact of exploiting CVE-2026-50591?
Exploiting CVE-2026-50591 can lead to user data exposure due to cross-site scripting vulnerabilities.
5
How can I mitigate CVE-2026-50591?
Mitigation for CVE-2026-50591 involves upgrading to the latest versions of Znuny that address this vulnerability.