CVE-2026-57381

PropertyHive versions up to and including 2.2.3 are vulnerable to a reflected cross-site scripting (XSS) attack due to improper input neutralization during web page generation. This vulnerability could allow attackers to execute arbitrary scripts in the context of a user's session, potentially leading to data theft or session hijacking. Organizations using affected versions of PropertyHive should prioritize remediation to safeguard user data and maintain application integrity.