medium5.4
CVE-2026-40464
NSP is vulnerable to a stored XSS due to insufficient validation or encoding of user-controlled input in a workflow application.
Impact
NSP is vulnerable to a stored XSS due to insufficient validation or encoding of user-controlled input in a workflow application. An authenticated attacker with access to the workflow application could embed harmful code that runs when another user views the content.
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.