CVE-2026-30082

Published March 30th, 2026

View on NVD ↗

CVSS v3

6.1

MEDIUM

CVSS v2

N/A

Affected

PROJECT

Description

Multiple stored cross-site scripting (XSS) vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters.

Cr0wld3r/CVE-2026-30082

Stored cross-site scripting (XSS) vulnerabilities in IngEstate Server v11.14.0

GitHub