Unescaped stored values in application security page in Otalio Ship Property Management System versions before 2.22.0 allows authenticated attackers to escalate privileges via persistent cross-site scriptingReferenceshttps://www.otalio.com/solutions/https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2026/MNDT-2026-0024.md
