CVE-2026-19447

FileOrbis prior to version 16.5 is vulnerable to stored cross-site scripting (XSS) due to improper input neutralization during web page generation. This flaw could allow attackers to inject malicious scripts that execute in the context of users accessing the application, potentially leading to data theft or session hijacking. Organizations using affected versions should prioritize remediation to protect user data and maintain application integrity.