Veille CVE

Jeudi 8 octobre 2026

1 CVE

  1. CVE-2026-89191 6.8 Moyenne

    SQLView KRIS

    Unsanitised input in the "template name" field of SQLView KRIS's Workflow Template feature is rendered in "onclick" attributes on the main dashboard without proper server-side sanitisation, allowing an attacker with administrative access to inject and store malicious scripts that execute in the browsers of affected users.