CVE-2026-79363
Received Received - Intake

Stored XSS in Cloudron Branding Footer Feature

Publication date: 2026-10-09

Last updated on: 2026-10-09

Assigner: MITRE

Description
Cloudron 9.1.7 and 9.2 contain a stored cross-site scripting (XSS) vulnerability in the Branding Footer feature. An authenticated administrator can store crafted HTML containing JavaScript event handlers in the Footer setting. The stored value is rendered without sufficient sanitization on the public login / OpenID interaction page and in the System Event Log, causing attacker-controlled JavaScript to execute in the Cloudron web origin when an affected page is viewed.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-09
Last Modified
2026-10-09
Generated
2026-10-09
AI Q&A
2026-10-09
EPSS Evaluated
N/A
NVD
CVE-2026-79363
EUVD
EUVD-2026-95789

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
n/a n/a n/a

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

Cloudron 9.1.7 and 9.2 have a stored cross-site scripting (XSS) vulnerability in the Branding Footer feature. An authenticated admin can inject malicious JavaScript into the Footer setting via HTML event handlers. This script executes when the public login or OpenID page is viewed or when the System Event Log is accessed.

Detection Guidance

Check Cloudron admin panel for suspicious Footer HTML content containing event handlers like onmouseover, onload, or onclick. Inspect login/OpenID pages for unexpected JavaScript execution. Review System Event Log for unusual entries.

Impact Analysis

An attacker with admin access could steal session cookies, redirect users to phishing sites, or perform actions on behalf of users. Users viewing the login page or event logs may unknowingly execute malicious scripts in their browsers.

Compliance Impact

This XSS vulnerability could lead to unauthorized data access or modification, violating GDPR's integrity and confidentiality requirements. For HIPAA, it may expose protected health information if exploited, risking compliance with security and privacy rules.

Mitigation Strategies

Upgrade Cloudron to a patched version. Remove any suspicious Footer HTML containing JavaScript event handlers. Review and clean System Event Log entries. Disable non-essential admin access temporarily.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-79363. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart