CVE-2026-18741

creationtimestamp| type| source ---|---|--- 2026-08-30 13:00:04+00:00| seen| https://t.me/GithubRedTeam/100349 2026-08-31 00:00:12+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/100349 2026-09-02 01:00:17+00:00| seen| Telegram/M1tcQDXp0xt9SGNq1y4EHMMYmmdZJtAONErVuHBShI8RHI 2026-09-...

CVE-2026-18741 Worksuite SaaS version prior to 6.0.14 Stored XSS via Asset Management Location and Description Fields

Worksuite SaaS versions prior to 6.0.14 contains a stored cross-site scripting vulnerability in the Asset Management module that allows authenticated administrators to inject arbitrary JavaScript by entering malicious payloads into the Location and Description fields when creating a new asset...

CVE-2026-18741 Worksuite SaaS version prior to 6.0.14 Stored XSS via Asset Management Location and Description Fields

Worksuite SaaS versions prior to 6.0.14 contains a stored cross-site scripting vulnerability in the Asset Management module that allows authenticated administrators to inject arbitrary JavaScript by entering malicious payloads into the Location and Description fields when creating a new asset...