Skip to content
OpenAdvisories
Critical · 9.4 CVE-2026-8333 EUVD-2026-124291GHSA-2hfc-fw5x-vjm9

TimePictra Stored Cross-site Scripting

Published Nov 12, 2026 · Updated Nov 12, 2026 · Assigned by Microchip

Description

A stored cross-site scripting vulnerability in Microchip the TimePictra platform could allow an authenticated, low-privileged attacker to store malicious script content that executes when another user views the affected page

Affected products

VendorProductAffectedFixed
Microchip TimePictra < 12.0 12.0

References