Back to search
CVE-2026-4794
Published: Mar 31, 2026
Modified: Mar 31, 2026
PUBLISHED
Description
Multiple cross-site scripting (XSS) vulnerabilities in PaperCut NG/MF before 25.0.10 allow authenticated administrator users to inject arbitrary web script or HTML code via different UI fields. This could be used to compromise other admininistrator's sessions or perform unauthorized actions via the administrator's authenticated context (e.g. requires an active login session).
| Vendor | Product | Versions |
|---|---|---|
PaperCut | PaperCut NG/MF | affected 0 - < 25.0.10 |
Weaknesses (CWE)
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now