Skip to content
OpenAdvisories

Vendor

tongcheng-security-team

3 known vulnerabilities.

Products

NextScan 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.7
    CVE-2026-126798

    NextScan 1.1.0 through 1.2.0 Stored XSS via URL Asset Detail View

    NextScan 1.1.0 through 1.2.0 contains a stored cross-site scripting vulnerability in the ns-admin URL asset detail dialog that renders crawled form request bodies (Asset_URL.data) via innerHTML without encoding. Attackers can host crafted forms on crawled sit…

    tongcheng-security-team NextScan