← CVE Intelligence

CVE-2026-61399

Apache CloudStack: Cross-Site Scripting (XSS) Vulnerability in Lock User Function in UI PUBLISHED

Description (CNA)

Improper Encoding or Escaping of Output vulnerability in Apache CloudStack's UI while using Lock User Functionality. This issue affects Apache CloudStack: from 4.20.0.0 through 4.20.3.0 and from 4.21.0.0 through 4.22.1.0. Users are recommended to upgrade to version 4.20.3.1 or 4.22.1.1 or later, which fixes the issue.

Affected (CNA)

Vendor / productVersions
Apache Software Foundation / Apache CloudStackaffected 4.20.0.0 through 4.20.3.0; affected 4.21.0.0 through 4.22.1.0

CWE

CWE-116

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.