| Title | Optimal IdM The OptimalCloud v5.0 Cross Site Scripting |
|---|
| Description | A vulnerability was found in The OptimalCloud (Optimal IdM, LLC) version 5.0. It has been rated as problematic. Affected by this issue is the timezone selection parameter (tz) exposed on public, pre-authentication pages. The manipulation of the tz argument leads to cross site scripting (CWE-79). The value is stored in a cookie and re-rendered on subsequent page loads, making the issue persistent for the affected browser session. The attack may be launched remotely and does not require authentication. The vendor was contacted early about this disclosure but did not respond in any way. |
|---|
| Source | ⚠️ https://example.com/v5.0/webapps/pages/public/Login?tz=wwwwwwwwww%27%22%3E%3C/div%3E%3Cdetails%20open%20ontoggle=[7].map(alert)%3E |
|---|
| User | Alexandre Rodrigo (UID 76412) |
|---|
| Submission | 09/19/2026 02:13 (1 month ago) |
|---|
| Moderation | 10/20/2026 06:40 (1 month later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 422656 [Optimal IdM OptimalCloud 5.0 Login tz cross site scripting] |
|---|
| Points | 20 |
|---|