CVE-2026-78289

CozyStay versions up to 1.10.0 are vulnerable to an unauthenticated Cross Site Scripting (XSS) flaw, allowing attackers to inject malicious scripts into web pages viewed by users. This vulnerability could lead to session hijacking, data theft, or defacement of the website, making it critical for organizations using this software to prioritize patching or mitigation efforts. Web application developers and security teams should address this issue promptly to safeguard user data and maintain application integrity.