PoC Index85,092 CVEs with PoCs

CVE-2026-78838

MEDIUM 6.5EPSS 0.4%

A reflected cross-site scripting (XSS) vulnerability in the grid_datasource.php component of AppNitro MachForm v30 allows attackers to execute arbitrary Javascript in the context of the victim's browser via injecting a crafted payload into the filter[filters][0][field] parameter.

CVSS v3.1 CNA
6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
EPSS
0.39% chance of exploitation in the next 30 days, 31st percentile
Published
2026-09-08
Updated
2026-09-09

Proof-of-concept exploits (1)

References

Related