CVE-2026-113808
CVE-2026-113808 · Stored XSS on SNS Enrollment Portal
This page contains facts from public vulnerability sources. Check the original advisory before updating.
A Stored Cross-Site Scripting vulnerability exists in the SNS enrollment Portal. Through the captive portal an attacker can inject an XSS when requesting user creation. The stored XSS can only be triggered during validation by the administrator.
CVSS 7.1 · High · EPSS 0.2%
- Published
- Updated
Affected products and versions
stormshield network security
- Versions
- ≥ 4.3.0, ≤ 4.3.44: Affected (semver)
- ≥ 4.8.0, ≤ 4.8.19: Affected (semver)
- ≥ 5.0.0, ≤ 5.0.9: Affected (semver)
- ≥ 5.1.0, ≤ 5.1.3: Affected (semver)
- 4.3.45 QS: Not affected (semver)
- 4.8.20 LTSB: Not affected (semver)
- 5.0.10: Not affected (semver)
- 5.1.4 EA: Not affected
No fix published