CVE-2026-52609

A reflected XSS flaw in reportico-web ≤ 8.1.0 lets attackers inject JavaScript via the reportico_criteria parameter paired with execute_mode=CRITERIA in run.php. CVSS 6.1 (Medium), network-exploitable, requires user interaction. No patch version or exploit code is provided in the documents; CISA ...

CVE-2026-52609

A reflected cross-site scripting XSS vulnerability in reportico-web = 8.1.0 allows remote attackers to execute arbitrary JavaScript in the web browser of a user by including a malicious payload in the reporticocriteria parameter in conjunction with the executemode=CRITERIA parameter of run.php...

EUVD-2026-61096

A reflected cross-site scripting XSS vulnerability in reportico-web = 8.1.0 allows remote attackers to execute arbitrary JavaScript in the web browser of a user by including a malicious payload in the reporticocriteria parameter in conjunction with the executemode=CRITERIA parameter of run.php...