CVE-2026-115993

Published Oct 24, 2026

Last updated 17 hours ago

CVSS medium 6.8

Overview

Description
Stored XSS vulnerability in the “Notes” field of the Checklists in Cervantes version v1.3-beta could allow an attacker to execute arbitrary code in another user's browser with elevated privileges
Source
772f0079-75c2-41ca-913e-d9072716578b
NVD status
Received

Risk scores

CVSS 3.1

Type
Secondary
Base score
6.8
Impact score
4
Exploitability score
2.3
Vector string
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N
Severity
MEDIUM

Weaknesses

772f0079-75c2-41ca-913e-d9072716578b
CWE-79

Social media

Hype score
Not currently trending

References

Sources include official advisories and independent security research.