{"id":"CVE-2026-119735","title":"Munshi XSS via Purchase Inquiry Thread Rendering","summary":"Munshi (by Petpooja) before 2026-07-13 contained a stored cross-site scripting vulnerability that allows authenticated users to inject malicious markup through item descriptions or messages submitted in the Purchase Inquiry thread (/purc…","severity":"medium","cvss":5.4,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","cvssSource":"cna","cwe":["CWE-79"],"vendor":"Petpooja","product":"Munshi","affected":["Munshi <= 2026-07-13"],"published":"2026-11-02","updated":"2026-11-02","sourceUpdated":"2026-11-02T19:00:05.857Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-119735","references":[{"url":"https://medium.com/@TheWildEye/stored-xss-in-munshi-a-purchase-inquiry-message-could-rewrite-the-page-6b8ef14f9999","label":"Researcher Disclosure"},{"url":"https://www.petpooja.com/","label":"Vender Homepage"},{"url":"https://www.vulncheck.com/advisories/munshi-xss-via-purchase-inquiry-thread-rendering","label":"VulnCheck Advisory: Munshi XSS via Purchase Inquiry Thread Rendering"}],"tags":["cve.org"],"epss":0.00192,"epssPercentile":0.08991,"ingestedAt":"2026-11-05T19:30:42.783Z","slug":"CVE-2026-119735","body":"## Overview\n\nMunshi (by Petpooja) before 2026-07-13 contained a stored cross-site scripting vulnerability that allows authenticated users to inject malicious markup through item descriptions or messages submitted in the Purchase Inquiry thread (/purchase-inquiry/thread/{thread-id}), which is assigned to innerHTML during rendering before text cleaning completes. Attackers can store a payload that executes in the browser of another user who opens the affected thread, achieving JavaScript execution and full-page defacement that re-triggers whenever the thread is reopened.\n\n## Affected\n\n- `Munshi <= 2026-07-13`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":30,"depthScoreParts":{"impact":29.7,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}