CVE-2026-59076 | Edito up to 5.10.2606 /api/auth/profile givenName/surname cross site scripting

November 13, 2026 Yanac

A vulnerability classified as problematic was found in Edito up to 5.10.2606. Affected by this issue is some unknown functionality of the file /api/auth/profile. Such manipulation of the argument givenName/surname leads to cross site scripting.

This vulnerability is documented as CVE-2026-59076. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More