CVE-2026-126798

MEDIUM 4.7

NextScan 1.1.0 through 1.2.0 Stored XSS via URL Asset Detail View

CVSS Score

4.7

EPSS Score

0.0%

EPSS Percentile

0th

NextScan 1.1.0 through 1.2.0 contains a stored cross-site scripting vulnerability in the ns-admin URL asset detail dialog that renders crawled form request bodies (Asset_URL.data) via innerHTML without encoding. Attackers can host crafted forms on crawled sites to store JavaScript that executes when users view asset details, stealing localStorage access tokens to hijack sessions, including administrators.

CWE	CWE-79
Vendor	tongcheng-security-team
Product	nextscan
Published	Nov 11, 2026

Stay Ahead of the Next One

Get instant alerts for tongcheng-security-team nextscan

Be the first to know when new medium vulnerabilities affecting tongcheng-security-team nextscan are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

Required

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

None

Affected Versions

tongcheng-security-team / NextScan

1.1.0 ≤ 1.2.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/tongcheng-security-team/NextScan/issues/49 hub.docker.com: https://hub.docker.com/r/lysec/ns-admin vul.yulun.ac.cn: https://vul.yulun.ac.cn/20261107/nextscan/ vulncheck.com: https://www.vulncheck.com/advisories/nextscan-1.1.0-through-1.2.0-stored-xss-via-url-asset-detail-view

Credits

Wu Yulun