XSS in Pegasystems Pega Infinity

CVE-2026-14337

Pega Platform versions 23.1.0 through 25.1.3 are affected by an Stored Cross-site scripting (XSS) vulnerability in a user interface component. Requires a high privileged user with a developer role.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.002 (16.2th percentile) — read the EPSS interpretation.