XSS in M-Files Corporation Web

CVE-2026-18371

HTML injection vulnerability in M-Files Web before 26.8.16330.2 allows an authenticated attacker to affect web user interface contents displayed to other users.

Vulnerability class: XSS (Cross-Site Scripting)

Affected products

Weakness classification (CWE)

References