CVE-2026-30082 in IngEstate Server
Sumário (Inglês)
Multiple stored cross-site scripting (XSS) vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters.
Responsável
MITRE
Reservar
04/03/2026
Divulgação
30/03/2026
Inscrições
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidade | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 354201 | IngEstate Server Software Package List Script de Site Cruzado | 79 | Não definido | Não definido | CVE-2026-30082 |