CVE-2026-90821 | Arcadia Technology Crafty Controller up to 4.10.x Webhook URL Form Field cross site scripting

October 16, 2026 Yanac

A vulnerability classified as problematic was found in Arcadia Technology Crafty Controller up to 4.10.x. Affected is an unknown function of the component Webhook URL Form Field. Executing a manipulation can lead to cross site scripting.

This vulnerability appears as CVE-2026-90821. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More