CVE-2026-3955 | elecV2P up to 3.8.3 jsfile Endpoint wbjs.js runJSFile code injection (Issue 194)

A vulnerability was found in elecV2P up to 3.8.3. It has been declared as critical. Affected by this issue is the function runJSFile of the file source-code/elecV2P-master/webser/wbjs.js of the component jsfile Endpoint. Such manipulation leads to code injection.

This vulnerability is traded as CVE-2026-3955. The attack may be launched remotely. Furthermore, there is an exploit available.

The project was informed of the problem early through an issue report but has not responded yet.