Skip to content
OpenAdvisories
High · 8.9 CVE-2026-30864 EUVD-2026-65074

Combodo iTop: Reflected XSS in dashboard revert

Published Aug 24, 2026 · Updated Aug 24, 2026 · Assigned by GitHub_M

Description

Combodo iTop is a web-based IT service management tool. Prior to 3.2.3, iTop is vulnerable to Reflected Cross-Site Scripting (XSS) in the dashboard revert functionality. This issue has been fixed in version 3.2.3.

Affected products

VendorProductAffectedFixed
Combodo iTop < 3.2.3 —

References