CVE-2026-5699

Stored Cross-Site Scripting XSS vulnerability in SABBATIC application that allows an attacker to store JavaScript code so that when a user views the page, code can be executed in the victim's browser. The list of assigned parameters and identifiers is as follows: parameter 'companyName' in...

CVE-2026-5702

Cross-Site Request Forgery CSRF vulnerability in SABBATIC application that allows an attacker can trick an authenticated user into clicking a malicious link or loading a page that sends unauthorized requests to a vulnerable endpoint...

CVE-2026-5700

Stored Cross-Site Scripting XSS vulnerability in SABBATIC application that allows an attacker to store JavaScript code so that when a user views the page, code can be executed in the victim's browser. The list of assigned parameters and identifiers is as follows: parameter 'observaciones' in...

CVE-2026-5697

Stored Cross-Site Scripting XSS vulnerability in SABBATIC application that allows an attacker to store JavaScript code so that when a user views the page, code can be executed in the victim's browser. The list of assigned parameters and identifiers is as follows: parameter 'nombre' in '/usuario'...

CVE-2026-5698

Stored Cross-Site Scripting XSS vulnerability in SABBATIC application that allows an attacker to store JavaScript code so that when a user views the page, code can be executed in the victim's browser. The list of assigned parameters and identifiers is as follows: parameters 'tituloes' and...

EUVD-2026-112743

Cross-Site Request Forgery CSRF vulnerability in SABBATIC application that allows an attacker can trick an authenticated user into clicking a malicious link or loading a page that sends unauthorized requests to a vulnerable endpoint...

CVE-2026-5702

The SABBATIC application is affected by a Cross-Site Request Forgery (CSRF) vulnerability (CWE-352). This flaw allows an attacker to trick an authenticated user into interacting with a malicious link or page, which then sends unauthorized requests to a vulnerable endpoint. No specific technical r...

CVE-2026-5702 Cross-Site Request Forgery (CSRF) vulnerability in SABBATIC application

Cross-Site Request Forgery CSRF vulnerability in SABBATIC application that allows an attacker can trick an authenticated user into clicking a malicious link or loading a page that sends unauthorized requests to a vulnerable endpoint...

EUVD-2026-112742

Stored Cross-Site Scripting XSS vulnerability in SABBATIC application that allows an attacker to store JavaScript code so that when a user views the page, code can be executed in the victim's browser. The list of assigned parameters and identifiers is as follows: parameter 'observaciones' in...

CVE-2026-5700

The SABBATIC application contains a Stored Cross-Site Scripting (XSS) vulnerability (CWE-79). This flaw allows an attacker to inject and store malicious JavaScript code via the 'observaciones' parameter in the /mis-gastos endpoint. When a victim views the affected page, the script executes in the...

CVE-2026-5700 Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application

Stored Cross-Site Scripting XSS vulnerability in SABBATIC application that allows an attacker to store JavaScript code so that when a user views the page, code can be executed in the victim's browser. The list of assigned parameters and identifiers is as follows: parameter 'observaciones' in...

CVE-2026-5699 Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application

Stored Cross-Site Scripting XSS vulnerability in SABBATIC application that allows an attacker to store JavaScript code so that when a user views the page, code can be executed in the victim's browser. The list of assigned parameters and identifiers is as follows: parameter 'companyName' in...

CVE-2026-5699

The SABBATIC application contains a Stored Cross-Site Scripting (XSS) vulnerability (CWE-79). An attacker can store malicious JavaScript code via the 'companyName' parameter in the /empresa endpoint. When a victim views the affected page, the stored script executes within their browser. The vulne...

EUVD-2026-112741

Stored Cross-Site Scripting XSS vulnerability in SABBATIC application that allows an attacker to store JavaScript code so that when a user views the page, code can be executed in the victim's browser. The list of assigned parameters and identifiers is as follows: parameter 'companyName' in...

CVE-2026-5698

The SABBATIC application is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. An attacker can inject malicious JavaScript code into the application, which then executes in the browser of any user viewing the affected page. Specifically, the vulnerability is tied to the 'titulo_es' and 'add_...

CVE-2026-5698 Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application

Stored Cross-Site Scripting XSS vulnerability in SABBATIC application that allows an attacker to store JavaScript code so that when a user views the page, code can be executed in the victim's browser. The list of assigned parameters and identifiers is as follows: parameters 'tituloes' and...

EUVD-2026-112740

Stored Cross-Site Scripting XSS vulnerability in SABBATIC application that allows an attacker to store JavaScript code so that when a user views the page, code can be executed in the victim's browser. The list of assigned parameters and identifiers is as follows: parameters 'tituloes' and...

CVE-2026-5697 Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application

Stored Cross-Site Scripting XSS vulnerability in SABBATIC application that allows an attacker to store JavaScript code so that when a user views the page, code can be executed in the victim's browser. The list of assigned parameters and identifiers is as follows: parameter 'nombre' in '/usuario'...

EUVD-2026-112739

Stored Cross-Site Scripting XSS vulnerability in SABBATIC application that allows an attacker to store JavaScript code so that when a user views the page, code can be executed in the victim's browser. The list of assigned parameters and identifiers is as follows: parameter 'nombre' in '/usuario'...

CVE-2026-5697

The SABBATIC application is vulnerable to a Stored Cross-Site Scripting (XSS) vulnerability (CWE-79). An attacker can exploit the 'nombre' parameter within the '/usuario' endpoint to store malicious JavaScript code. When a victim views the affected page, the script executes in their browser. No s...