Description
Multiple cross-site scripting (XSS) vulnerabilities in PaperCut NG/MF before 25.0.10 allow authenticated administrator users to inject arbitrary web script or HTML code via different UI fields. This could be used to compromise other admininistrator's sessions or perform unauthorized actions via the administrator's authenticated context (e.g. requires an active login session).
Published: 2026-03-31
Score: 2.1 Low
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 31 Mar 2026 03:00:00 +0000

Type Values Removed Values Added
Description Multiple cross-site scripting (XSS) vulnerabilities in PaperCut NG/MF before 25.0.10 allow authenticated administrator users to inject arbitrary web script or HTML code via different UI fields. This could be used to compromise other admininistrator's sessions or perform unauthorized actions via the administrator's authenticated context (e.g. requires an active login session).
Title Multiple cross-site scripting (XSS) vulnerabilities in PaperCut NG/MF
Weaknesses CWE-79
References
Metrics cvssV4_0

{'score': 2.1, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: PaperCut

Published:

Updated: 2026-03-31T00:39:56.135Z

Reserved: 2026-03-25T00:52:13.130Z

Link: CVE-2026-4794

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-03-31T01:16:36.743

Modified: 2026-03-31T01:16:36.743

Link: CVE-2026-4794

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses