CVE-2026-57415

The Codemenschen Gift Vouchers application is vulnerable to a stored cross-site scripting (XSS) attack due to improper input neutralization during web page generation. This vulnerability can allow attackers to inject malicious scripts that execute in the context of users accessing the application, potentially leading to data theft or session hijacking. Organizations using versions up to and including 4.7.0 should prioritize patching this vulnerability to mitigate the associated risks.