CVE-2026-42457 | loft-sh loft up to 4.4.2/4.5.4/4.6.1/4.7.0 Name cross site scripting (GHSA-x7cq-v3h6-426c)

A vulnerability classified as problematic was found in loft-sh loft up to 4.4.2/4.5.4/4.6.1/4.7.0. Affected by this vulnerability is an unknown functionality. Such manipulation of the argument Name leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2026-42457. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is advised.