Description

Pega Platform versions 8.1.0 through 25.1.1 are affected by a Stored Cross-Site Scripting vulnerability in a user interface component. Requires a high privileged user with a developer role.

Remediation

References

CVE-2026-1711

Related Vulnerabilities

Python Uncontrolled Resource Consumption Vulnerability (CVE-2022-48564)

MediaWiki CVE-2012-4885 Vulnerability (CVE-2012-4885)

Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7744)

WordPress Plugin PI Button includes Backdoor [Only if downloaded via the vendor website] (3.3.3)

WordPress Plugin Blog2Social:Social Media Auto Post & Scheduler Security Bypass (6.9.11)

Severity

Medium

Classification

CVE-2026-1711 CWE-707 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities