CVE-2026-28187

The vulnerability allows unauthenticated cross-site scripting (XSS) in the Knowledge Base for Documentation and FAQs with AI Assistance versions up to 17.211.0, potentially enabling attackers to execute arbitrary scripts in the context of users accessing the affected application. This could lead to data theft, session hijacking, or defacement of the web interface. Organizations using these versions should prioritize patching to mitigate the risk of exploitation.