CVE-2026-18247CWE-79cross-site-scripting
CVE-2026-18247
published August 11, 2026
What it is
A Cross Site Scripting (XSS) vulnerability in the Web Portals of AtHoc IWS in versions earlier than 7.21 HF-734 could allow an attacker to potentially execute actions in the context of the victim's session.
The record
Technical detail
- CVSS
- 5.3 · NONE
- CVSS v4.0
- Not supplied
- EPSS
- 0.00418 · 35.0th percentile
- Weakness
- CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
- Published
- 2026-08-11T21:17Z
References (1)
EPSS history
Timeline