CVE-2026-4950

The CustomerAdministration portal KundenManager of VertiGIS WebOrderSystem allows privileged users to manage the employees of defined companies user groups. User properties, for example the "secondName" parameter, can be filled with JavaScript code while editing a user. The code is stored and...

CVE-2026-4950

The VertiGIS WebOrderSystem is vulnerable to a Stored Cross-Site Scripting (XSS) flaw in its CustomerAdministration portal (KundenManager) . The issue occurs because user properties, such as the "secondName" parameter , can be populated with malicious JavaScript code during user editing. This cod...

EUVD-2026-108612

The CustomerAdministration portal KundenManager of VertiGIS WebOrderSystem allows privileged users to manage the employees of defined companies user groups. User properties, for example the "secondName" parameter, can be filled with JavaScript code while editing a user. The code is stored and...