CVE WATCH / VULNERABILITY DETAIL
CVE-2026-115513
HIGHCVSS 8.7NVD feed
Published 22 October 2026 · tracked since 23 October 2026
Description
OpenCATS before 0.12.0 contains a stored cross-site scripting vulnerability that allows a low-privileged authenticated user to inject HTML/JavaScript payloads by setting a Candidate, Company, Contact, Job Order, or List name/title field, which is stored unsanitized and later rendered unescaped in th
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-115356 MEDIUM 5.4
- CVE-2026-114654 MEDIUM 6.5
- CVE-2026-114644 MEDIUM 5.9
- CVE-2026-114645 MEDIUM 5.2
- CVE-2026-114612 CRITICAL 9.9
- CVE-2026-114613 HIGH 7.5
- CVE-2022-51026 CRITICAL 9.8
- CVE-2026-77156 MEDIUM 6.4
- CVE-2026-114609 MEDIUM 5.8
- CVE-2026-114610 MEDIUM 6.5