Skip to content
OpenAdvisories
Medium · 6.8 CVE-2026-115993 EUVD-2026-109259GHSA-fgjg-4v79-vhpp

Stored XSS in the “Notes” field of project checklists

Published Oct 24, 2026 · Updated Nov 2, 2026 · Assigned by Grayback

Description

Stored XSS vulnerability in the “Notes” field of the Checklists in Cervantes version v1.3-beta could allow an attacker to execute arbitrary code in another user's browser with elevated privileges

Affected products

VendorProductAffectedFixed
CervantesSec cervantes alpha 0.3 – ≤ 1.3-beta v.1.4.0-beta

References