7 matches found
CVE-2026-18741
CVE-2026-18741 - Worksuite SaaS의 저장형 XSS 개요 CVE-2026-18741은 Worksuite SaaS 6.0.14 이전 버전에 영향을 미치는 저장형 XSS 취약점입니다. 이 문제는 자산 관리Asset Management 모듈에 위치해 있습니다. 사용자 제어 입력은 다음과 같은 필드를 통해 저장될 수 있습니다: 위치Location 설명Description 저장된 입력은 이후 영향을 받는 자산이 조회될 때 렌더링되어, 공격자가 제어하는 JavaScript가 해당 자산을 조회하는 사용자의 브라우저...
CVE-2026-18741
Worksuite SaaS versions prior to 6.0.14 contains a stored cross-site scripting vulnerability in the Asset Management module that allows authenticated administrators to inject arbitrary JavaScript by entering malicious payloads into the Location and Description fields when creating a new asset...
EUVD-2026-58471
Worksuite SaaS versions prior to 6.0.14 contains a stored cross-site scripting vulnerability in the Asset Management module that allows authenticated administrators to inject arbitrary JavaScript by entering malicious payloads into the Location and Description fields when creating a new asset...
CVE-2026-18741
Summary: CVE-2026-18741 affects Worksuite SaaS prior to v6.0.14 and is a stored cross-site scripting vulnerability in the Asset Management module. The flaw allows authenticated administrators to inject arbitrary JavaScript by submitting payloads into the Location or Description fields during asse...
CVE-2026-18741 Worksuite SaaS version prior to 6.0.14 Stored XSS via Asset Management Location and Description Fields
Worksuite SaaS versions prior to 6.0.14 contains a stored cross-site scripting vulnerability in the Asset Management module that allows authenticated administrators to inject arbitrary JavaScript by entering malicious payloads into the Location and Description fields when creating a new asset...
CVE-2026-18741 Worksuite SaaS version prior to 6.0.14 Stored XSS via Asset Management Location and Description Fields
Worksuite SaaS versions prior to 6.0.14 contains a stored cross-site scripting vulnerability in the Asset Management module that allows authenticated administrators to inject arbitrary JavaScript by entering malicious payloads into the Location and Description fields when creating a new asset...
PT-2026-71866
Worksuite SaaS versions prior to 6.0.14 contains a stored cross-site scripting vulnerability in the Asset Management module that allows authenticated administrators to inject arbitrary JavaScript by entering malicious payloads into the Location and Description fields when creating a new asset...