CVE-2026-28178

Powerkit versions up to 3.1.0 are vulnerable to a Contributor Cross Site Scripting (XSS) flaw, which could allow attackers to inject malicious scripts into web pages viewed by users. This vulnerability poses a medium risk, potentially leading to unauthorized access or data manipulation. Organizations using affected versions should prioritize remediation to mitigate the risk of exploitation.