What is CVE-2026-78838?

CVE-2026-78838 is a vulnerability in N/a. Published 2026-09-08.

Is CVE-2026-78838 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in N/a

CVE-2026-78838

A reflected cross-site scripting (XSS) vulnerability in the grid_datasource.php component of AppNitro MachForm v30 allows attackers to execute arbitrary Javascript in the context of the victim's browser via injecting a crafted payload into the filter[filters][0][field] parameter.

Affected products

Public proof-of-concept exploits

nabeelmkhan/CVE-2026-78838

References

cve@mitre.org
cve@mitre.org

Frequently asked questions

What is CVE-2026-78838?: CVE-2026-78838 is a vulnerability in N/a. Published 2026-09-08.
Is CVE-2026-78838 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.