maalfer vulnerabilities

Products

• Pentestify 5
• MailerUp 1

Latest maalfer CVEs

Newest publication first

1. CVE-2026-76203 CSS sanitizer bypass in Pentestify report themes allows forced outbound requests

   Published 2026-08-19

   Medium·CVSS 5.1 EPSS 0.40%

   Incorrect Behavior Order: Validate Before Canonicalize in the report theme CSS sanitizer in maalfer Pentestify 1.2.0 through 2.3.2 allows an authenticated user to force outbound HTTP requests from other users' browsers, disclosing their IP address and User-Agent, via CSS hex esca...

2. CVE-2026-75872 HTML Injection in MailerUp double opt-in verification email

   Published 2026-08-18

   Medium·CVSS 6.9 EPSS 0.74%

   HTML Injection in the public subscription form in maalfer MailerUp before 1.1.3 allows unauthenticated remote attackers to have the application send a message carrying arbitrary HTML, to an attacker-chosen address and from the form owner's configured sending identity, via the fir...

3. CVE-2026-19744 Stored Cross-site Scripting in Pentestify Markdown renderer via unescaped quotes

   Published 2026-08-13

   Medium·CVSS 5.1 EPSS 0.47%

   Cross-site Scripting in the Markdown renderer in maalfer Pentestify before 2.3.2 allows authenticated users to execute arbitrary JavaScript in the application origin via a Markdown link whose URL contains a double quote, which closes the anchor's href attribute because the render...

4. CVE-2026-19716 Stored Cross-site Scripting in Pentestify user account deletion via unescaped username

   Published 2026-08-13

   Medium·CVSS 5.1 EPSS 0.47%

   Stored Cross-site Scripting (CWE-79) in the user management component in maalfer Pentestify before 1.1.1 allows an authenticated attacker to execute arbitrary JavaScript in the browser of another authenticated user via a crafted username, because the frontend escapes the username...

5. CVE-2026-19434 Stored Cross-site Scripting in Pentestify finding severity field

   Published 2026-08-11

   Medium·CVSS 5.1 EPSS 0.47%

   Cross-site Scripting in the finding renderer in maalfer Pentestify before 2.3.1 allows authenticated users to execute arbitrary JavaScript in the application origin via HTML markup stored in a finding's severity field, which the frontend interpolates unescaped into class and styl...

6. CVE-2026-59238 Stored XSS in Pentestify via unsanitized finding images and report client logo

   Published 2026-07-20

   Medium·CVSS 6.9 EPSS 0.56%

   Stored Cross-site Scripting (CWE-79) in the client-side report rendering functions (renderPreview, renderEditor, renderAuditData in js/app.js) in maalfer Pentestify before 1.1.0 allows a remote, authenticated attacker to execute arbitrary JavaScript in the browser of any user who...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.