EIP-2026-104169

This advisory details a cross-site scripting (XSS) vulnerability in Applicure dotDefender's log viewer, which fails to properly HTML-encode user-supplied input in HTTP headers. The vulnerability allows an attacker to inject malicious scripts that execute when viewed by an administrator.