Ghostwire
Home / Vulnerabilities / CVE-2026-29971

CVE-2026-29971: A reflected cross-site scripting (XSS) vulnerability exists in WebFileSys version 2.31.1. User-controlled input is...

MEDIUM CVSS 5.5

Published: April 27, 2026 | Last Modified: April 27, 2026

Description

A reflected cross-site scripting (XSS) vulnerability exists in WebFileSys version 2.31.1. User-controlled input is reflected into HTML and JavaScript contexts without proper output encoding, allowing arbitrary JavaScript execution in the victim's browser.

Ghostwire Analysis — What This Means Practically

This analysis is generated by Ghostwire from NVD, CISA KEV, EPSS, and open-source intelligence data. Verify findings through primary sources before acting.

Security Coverage (2 articles)

Tenable CVEs
CVE-2026-29971
 CVE Feed
CVE-2026-29971 - WebFileSys Reflected Cross-Site Scripting (XSS)

References