CVE-2026-78318: Apache Syncope: Unauthenticated reflected XSS in Console and Enduser

<p>Posted by Francesco Chicchiriccò on Sep 14</p>Severity: moderate <br /> <br /> Affected versions:<br /> <br /> - Apache Syncope (org.apache.syncope.client.idrepo:syncope-client-idrepo-common-ui) 4.0.4 through 4.0.7<br /> - Apache Syncope (org.apache.syncope.client.idrepo:syncope-client-idrepo-common-ui) 4.1.0-M0 through 4.1.2<br /> <br /> Description:<br /> <br /> Improper neutralization of inp