CVE-2026-57391

Tangible Loops & Logic versions up to 4.2.3 are vulnerable to a stored cross-site scripting (XSS) flaw due to improper input neutralization during web page generation. This vulnerability could allow an attacker to inject malicious scripts that execute in the context of users' browsers, potentially compromising sensitive data or user sessions. Organizations using affected versions should prioritize patching to mitigate the risk of exploitation.