GHSA-X397-5HRV-J9M9 Cachet has Stored XSS in Incident Component

Summary A stored Cross-Site Scripting XSS vulnerability exists in the incident creation form, allowing an authenticated attacker to inject malicious HTML/JavaScript that executes in the browser of any user who views the status page, potentially leading to session token theft and account takeover...

PT-2026-118613

Name of the Vulnerable Software and Affected Versions Cachet versions prior to 2.4.2 Cachet version 3 Description A stored Cross-Site Scripting XSS issue exists in the incident creation form. An authenticated attacker can inject malicious HTML or JavaScript into the Incident Name and Incident...