XSS in Pegasystems Pega Infinity
CVE-2026-14337
Pega Platform versions 23.1.0 through 25.1.3 are affected by an Stored Cross-site scripting (XSS) vulnerability in a user interface component. Requires a high privileged user with a developer role.
Vulnerability class: XSS (Cross-Site Scripting)
Affected products
- Pegasystems Pega Infinity — versions 23.1.0