CVE-2018-17871

The CVE-2018-17871 entry describes an Improper Access Control (CWE-284) in Verba Collaboration Compliance and Quality Management Platform. Affected versions are before 9.2.1.5545 (tested

CVE-2026-21730

CVE-2026-21730 affects Verba. A stored XSS exists in the login logging path: when an unauthenticated attacker logs in with an incorrect username, the username is recorded without sanitization and can execute in the admin’s browser via the log viewer. Impact aligned to CVSS v4.0 metrics (base scor...