VYPR

Pentestify

by Maalfer

Source repositories

CVEs (1)

  • CVE-2026-59238MedJul 20, 2026
    risk 0.00cvss epss 0.01

    Stored Cross-site Scripting (CWE-79) in the client-side report rendering functions (renderPreview, renderEditor, renderAuditData in js/app.js) in maalfer Pentestify before 1.1.0 allows a remote, authenticated attacker to execute arbitrary JavaScript in the browser of any user…