Skip to content
OpenAdvisories
Critical · 9.3 CVE-2026-3010 EUVD-2026-9102GHSA-w7vw-jw3p-g2p7

TimePictra Stored Cross-Site Scripting

Published Feb 28, 2026 · Updated Mar 2, 2026 · Assigned by Microchip

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Microchip TimePictra allows Query System for Information.This issue affects TimePictra: from 11.0 through 11.3 SP2.

Affected products

VendorProductAffectedFixed
Microchip TimePictra 11.0 – ≤ 11.3 SP2 —

References