CVE-2026-25739 | Indico up to 3.3.9 Content Security Policy cross site scripting (GHSA-jxc4-54g3-j7vp)

February 19, 2026 Yanac

A vulnerability has been found in Indico up to 3.3.9 and classified as problematic. This affects an unknown function of the component Content Security Policy Handler. The manipulation leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2026-25739. The attack is possible to be carried out remotely. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More