CVE-2026-108264 | Wizarrrr Wizarr up to 2026.9.0 Wizard routes.py cross site scripting

October 9, 2026 Yanac

A vulnerability was found in Wizarrrr Wizarr up to 2026.9.0 and classified as problematic. Impacted is an unknown function of the file app/blueprints/wizard/routes.py of the component Wizard. Executing a manipulation can lead to cross site scripting.

The identification of this vulnerability is CVE-2026-108264. The attack may be launched remotely. There is no exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More