CVE-2026-30082 in IngEstate Server

Resumen (Inglés)

Multiple stored cross-site scripting (XSS) vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters.

Responsable

MITRE

Reservar

2026-03-04

Divulgación

2026-03-30

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
354201	IngEstate Server Software Package List secuencias de comandos en sitios cruzados	79	No está definido	No está definido	CVE-2026-30082