Skip to content
OpenAdvisories

Vendor

Froiden

2 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 4.8
    CVE-2026-18741 Public exploit

    Worksuite SaaS version prior to 6.0.14 Stored XSS via Asset Management Location and Description Fields

    Worksuite SaaS versions prior to 6.0.14 contains a stored cross-site scripting vulnerability in the Asset Management module that allows authenticated administrators to inject arbitrary JavaScript by entering malicious payloads into the Location and Descriptio…

  • Medium 6.1

    Froiden TableTrack 1.3.10 Stored XSS via Order Notes Field

    Froiden TableTrack through 1.3.10 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject arbitrary HTML and JavaScript through the order notes field without sanitization. Attackers can craft malicious payloads in …