CVE-2026-44977 - countly-server: Stored XSS in feedback upload enables app-admin to compromise global admin session context
CVE ID :CVE-2026-44977 Published : Oct. 16, 2026, 4:17 p.m. | 1 hour, 16 minutes ago Description :countly-server is the server-side part of Countly, a product analytics solution. Prior to 24.05.50 and 25.03.44, plugins/star-rating/api/api.js allows a non-global application administrator to...