5 matches found
CVE-2026-88262
bizwell xClick (groupware solution) is affected by an insufficient session expiration vulnerability that allows Authentication Bypass . The issue impacts versions R2, R3, and R3.1 . The vulnerability is network-reachable with low complexity and no prior privileges required, though it demands pass...
EUVD-2026-78256
Insufficient session expiration vulnerability in bizwell xClick allows Authentication Bypass. This issue affects xClick: R2, R3, and R3.1...
CVE-2026-88261
bizwell xClick is affected by an improper input validation vulnerability that allows Stored XSS in versions R2, R3, and R3.1 . The CVSS 4.0 score is 5.1 (MEDIUM) , with a network attack vector, low complexity, low privileges required, and passive user interaction, resulting in low confidentiality...