TI-2026-41724 CVE-2026-57958 · GHSA-x4g3-x4c9-rjf8
Mixpost 2.6.0 - Reflected XSS via OAuth Callback Error Parameter
Priority MEDIUM 62
Mixpost through 2.6.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to execute arbitrary JavaScript in authenticated users' browsers by crafting malicious OAuth callback UR…