TI-2026-23410 CVE-2026-29969 · GHSA-8qx2-56wc-5hxhA cross-site scripting (XSS) vulnerability in the wff_cols_pref.css.aspx endpoint of…Priority LOW 27A cross-site scripting (XSS) vulnerability in the wff_cols_pref.css.aspx endpoint of staffwiki v7.0.1.19219 allows attackers to execute arbitrary Javascript in the context of the user's browser via a crafted HTTP request…CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00259 · Published 2026-03-26 · No fix listed CWE-79
