CVE-2026-115993
CVE-2026-115993 · Stored XSS in the “Notes” field of project checklists
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Stored XSS vulnerability in the “Notes” field of the Checklists in Cervantes version v1.3-beta could allow an attacker to execute arbitrary code in another user's browser with elevated privileges
CVSS 6.8 · Medium · EPSS 0.3%
- Published
- Updated
Affected products and versions
cervantes
- Versions
- ≥ alpha 0.3, ≤ 1.3-beta: Affected (custom)
- v.1.4.0-beta: Not affected
No fix published