CVE-2026-5700

Stored Cross-Site Scripting XSS vulnerability in SABBATIC application that allows an attacker to store JavaScript code so that when a user views the page, code can be executed in the victim's browser. The list of assigned parameters and identifiers is as follows: parameter 'observaciones' in...

EUVD-2026-112742

Stored Cross-Site Scripting XSS vulnerability in SABBATIC application that allows an attacker to store JavaScript code so that when a user views the page, code can be executed in the victim's browser. The list of assigned parameters and identifiers is as follows: parameter 'observaciones' in...

CVE-2026-5700

The SABBATIC application contains a Stored Cross-Site Scripting (XSS) vulnerability (CWE-79). This flaw allows an attacker to inject and store malicious JavaScript code via the 'observaciones' parameter in the /mis-gastos endpoint. When a victim views the affected page, the script executes in the...

CVE-2026-5700 Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application

Stored Cross-Site Scripting XSS vulnerability in SABBATIC application that allows an attacker to store JavaScript code so that when a user views the page, code can be executed in the victim's browser. The list of assigned parameters and identifiers is as follows: parameter 'observaciones' in...