CVE-2026-89191

Unsanitised input in the "template name" field of SQLView KRIS's Workflow Template feature is rendered in "onclick" attributes on the main dashboard without proper server-side sanitisation, allowing an attacker with administrative access to inject and store malicious scripts that execute in the...

CVE-2026-89191

SQLView KRIS is vulnerable to a Stored Cross-Site Scripting (XSS) flaw within its Workflow Template feature. The root cause is the lack of server-side sanitisation for the "template name" field, which is subsequently rendered in "onclick" attributes on the main dashboard. An attacker with adminis...

CVE-2026-89191 Stored Cross-Site Scripting in SQLView KRIS

Unsanitised input in the "template name" field of SQLView KRIS's Workflow Template feature is rendered in "onclick" attributes on the main dashboard without proper server-side sanitisation, allowing an attacker with administrative access to inject and store malicious scripts that execute in the...

EUVD-2026-94804

Unsanitised input in the "template name" field of SQLView KRIS's Workflow Template feature is rendered in "onclick" attributes on the main dashboard without proper server-side sanitisation, allowing an attacker with administrative access to inject and store malicious scripts that execute in the...