Live › vulnerability › CVE-2026-115993
Go to dashboardThe Notes field of Checklists in Cervantes v1.3-beta stores attacker-supplied script that runs when other users view it. An attacker can run code in another user's browser with that user's elevated privileges.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-24 09:47 UTC. All times on this page are UTC.
No product ranges from the sources yet.
Unknown from the sources.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Stored XSS vulnerability in the “Notes” field of the Checklists in Cervantes version v1.3-beta could allow an attacker to execute arbitrary code in another user's browser with elevated privileges
This page as .md · .json · in your agent: get_signal("CVE-2026-115993")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.