Skip to content
OpenAdvisories
Medium · 4.8 CVE-2026-1711 EUVD-2026-23114GHSA-332r-xc5m-v45j

Pega Platform versions 8.1.0 through 25.1.1 are affected by a Stored Cross-Site Scripting vulnerability in a user interface component. Requires a high privileged user with a developer role.

Published Apr 15, 2026 · Updated Apr 16, 2026 · Assigned by Pega

Vendor: Pega Systems Product: Pega Infinity

Description

Pega Platform versions 8.1.0 through 25.1.1 are affected by a Stored Cross-Site Scripting vulnerability in a user interface component. Requires a high privileged user with a developer role.

Affected products

VendorProductAffectedFixed
Pegasystems Pega Infinity 8.1.0 – < Infinity 25.1.2 Infinity 25.1.2

Advisories 1

References