CVE-2026-115513

OpenCATS before 0.12.0 contains a stored cross-site scripting vulnerability that allows a low-privileged authenticated user to inject HTML/JavaScript payloads by setting a Candidate, Company, Contact, Job Order, or List name/title field, which is stored unsanitized and later rendered unescaped in...

CVE-2026-115513 OpenCATS before 0.12.0 Stored XSS via MRU Navigation Panel

OpenCATS before 0.12.0 contains a stored cross-site scripting vulnerability that allows a low-privileged authenticated user to inject HTML/JavaScript payloads by setting a Candidate, Company, Contact, Job Order, or List name/title field, which is stored unsanitized and later rendered unescaped in...

CVE-2026-115513

The software OpenCATS before version 0.12.0 is vulnerable to a stored cross-site scripting (XSS) flaw. The root cause is the unsanitized storage and subsequent unescaped rendering of fields such as Candidate, Company, Contact, Job Order, or List name/title. The malicious payload is executed via t...

EUVD-2026-108259

OpenCATS before 0.12.0 contains a stored cross-site scripting vulnerability that allows a low-privileged authenticated user to inject HTML/JavaScript payloads by setting a Candidate, Company, Contact, Job Order, or List name/title field, which is stored unsanitized and later rendered unescaped in...