CVE-2026-44977 — countly-server: Stored XSS in feedback upload may enable app-admin to compromise global admin session context

CVE-2026-44977 is a stored cross-site scripting (XSS) vulnerability in countly-server’s feedback upload. According to the CERT title, it may enable an app-admin to compromise the global admin session context.