Description
A stored cross-site scripting (XSS) vulnerability in WatchGuard Dimension's task scheduling feature allows a low-privileged authenticated administrator to inject arbitrary HTML/JavaScript into these fields, which then executes in the browser session of any other user.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WatchGuard | Dimension | 2.0 – < 2.3.1 | 2.3.1 |
References
- https://psirt.watchguard.com/CVE-2026-78047 vendor-advisory