CVE-2026-54694 – NationalSecurityAgency/skills-service has Stored XSS via User Registration Enabling Admin Account Takeover
CVE ID :CVE-2026-54694 Published : Sept. 9, 2026, 7:17 p.m. | 17 minutes ago Description :SkillTree is a micro-learning gamification platform. Prior to version 4.4.2, two independent code flaws combine into a single exploitable attack chain, with three distinct exploitation paths…
