Description
A cross-site scripting (XSS) vulnerability in the wff_cols_pref.css.aspx endpoint of staffwiki v7.0.1.19219 allows attackers to execute arbitrary Javascript in the context of the user's browser via a crafted HTTP request.
Medium · 6.1
CVE-2026-29969
EUVD-2026-16299GHSA-8qx2-56wc-5hxh
A cross-site scripting (XSS) vulnerability in the wff_cols_pref.css.aspx endpoint of staffwiki v7.0.1.19219 allows attackers to execute arb…
Published Mar 26, 2026 · Updated Mar 30, 2026 · Assigned by mitre