CVE-2026-57394

The vulnerability in Tribulant Software Newsletters allows for reflected cross-site scripting (XSS) due to improper input neutralization during web page generation. This can enable attackers to execute arbitrary scripts in the context of a user's session, potentially leading to data theft or session hijacking. Organizations using affected versions of Newsletters (up to 4.14) should prioritize remediation to protect their users from these exploits.