CVE-2026-19744— Stored Cross-site Scripting in Pentestify Markdown renderer via unescaped quotes
Quick assessment
Affected
maalfer Pentestify
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 maalfer Pentestify 2.3.2 之前的版本中，Markdown 渲染器存在跨站脚本漏洞（XSS），允许已认证用户通过在 Markdown 链接的 URL 中包含双引号来执行任意 JavaScript 代码，因为渲染器的 sanitization（净化）步骤未对双引号进行转义，从而闭合了超链接元素的 href 属性。
Affected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| maalfer | Pentestify | < 2.3.2 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-19744
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Stored Cross-site Scripting in Pentestify Markdown renderer via unescaped quotes
Source: CVE Program / CVE List V5
Vulnerability Description
Cross-site Scripting in the Markdown renderer in maalfer Pentestify before 2.3.2 allows authenticated users to execute arbitrary JavaScript in the application origin via a Markdown link whose URL contains a double quote, which closes the anchor's href attribute because the renderer's sanitization step does not escape quotes
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| maalfer | Pentestify | 0 ~ 2.3.2 | - |
|
II. Public POCs for CVE-2026-19744
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-19744
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-19744 (1)
Vendor Advisories for CVE-2026-19744 (1)
Vendor Pages for CVE-2026-19744 (1)
-
🔗 Release v2.3.2 · ccyl13/Pentestify · GitHub release-notes
IV. Related Vulnerabilities
Same product: Pentestify
-
CVE-2026-76203
CSS sanitizer bypass in Pentestify report themes allows forc -
CVE-2026-19716
Stored Cross-site Scripting in Pentestify user account delet -
CVE-2026-19434
Stored Cross-site Scripting in Pentestify finding severity f -
CVE-2026-59231
Server-Side Request Forgery in Pentestify PDF export via unv -
CVE-2026-59238
Stored XSS in Pentestify via unsanitized finding images and
Same vendor: maalfer
-
CVE-2026-76203
CSS sanitizer bypass in Pentestify report themes allows forc -
CVE-2026-75872
HTML Injection in MailerUp double opt-in verification email -
CVE-2026-19716
Stored Cross-site Scripting in Pentestify user account delet -
CVE-2026-19434
Stored Cross-site Scripting in Pentestify finding severity f -
CVE-2026-59238
Stored XSS in Pentestify via unsanitized finding images and
Same weakness: CWE-79
-
CVE-2026-94161
WordPress Grand Restaurant theme < 7.0.11 - Reflected Cross -
CVE-2026-94158
WordPress Gloria Admin Panel plugin <= 1.3 - Reflected Cross -
CVE-2026-94159
WordPress Total Donations plugin <= 2.0.5 - Cross Site Scrip -
CVE-2026-94167
WordPress Kubio AI Page Builder plugin <= 2.9.3 - Cross Site -
CVE-2026-94170
WordPress Sassy Social Share plugin <= 3.3.79 - Cross Site S
V. Comments for CVE-2026-19744
No comments yet