CVE-2026-5700
2026-10-29
12h17 +00:00
12h17 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
CVE 描述
Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an attacker to store JavaScript code so that when a user views the page, code can be executed in the victim's browser. The list of assigned parameters and identifiers is as follows:
parameter 'observaciones' in /mis-gastos endpoint.
CVE 資訊
相關弱點
| 弱點名稱 | 來源 | |
|---|---|---|
| Improper Neutralization of Input During Web Page Generation The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. |
