AI Engine (N/a Through 3.9.1) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/ai-engine-n/a-through-3.9.1/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioWed, 11 Nov 2026 14:04:52 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgMeow Apps AI Engine: Stored Cross-site Scripting (CVE-2026-123478)https://feed.craftedsignal.io/briefs/2026-11-meow-apps-ai-engine-xss-cve-2026-123478/Wed, 11 Nov 2026 14:04:52 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-meow-apps-ai-engine-xss-cve-2026-123478/Meow Apps AI Engine, from n/a through 3.9.1, contains an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability that allows Stored XSS.Meow Apps AI Engine is affected by a Stored Cross-site Scripting (XSS) vulnerability, identified as CVE-2026-123478. The issue is caused by improper neutralization of input during web page generation.

Impact

The vulnerability has a CVSS v3.1 Base Score of 7.1.

Affected Versions

  • AI Engine: from n/a through 3.9.1
]]>highadvisoryxssweb-application