Topic
3 articles
CyberSecureToday covers Stored XSS across 3 articles published between 27 Sep 2026 and 18 Oct 2026.
The coverage includes 3 vulnerability advisories. 3 advisories are rated critical or high severity.
Stories on Stored XSS most often intersect with CWE-79, Mozilla and Pontoon, with Technology, Cloud & SaaS the most affected sector. The most recent story, “Stored XSS on Mozilla Pontoon Localization Dashboards Enabled Administrative Account Takeover”, was published 18 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.
Threat IntelA stored cross-site scripting flaw in Mozilla Pontoon public dashboards allowed malicious contributor addresses to execute arbitrary code in reviewer sessions.
KubernetesSUSE Rancher CVE-2026-88804 (CVSS 9.6) lets unauthenticated attackers rewrite UI settings, plant login-page script and take over managed Kubernetes clusters.
Threat IntelCISA ICS Advisory ICSA-26-225-14 warns of a high-severity stored XSS defect in Johnson Controls Metasys building automation systems risking administrative takeover.