CVE-2026-22232 — OPEXUS eCASE Audit Project Setup stored XSS
OPEXUS eCASE Audit allows an authenticated attacker to save JavaScript in the "A or SIC Number" field within the Project Setup functionality. The JavaScript is executed whenever…
Published: 2026-01-08 · CVSS: 4.8 · CVSS 4.0
OPEXUS eCASE Audit allows an authenticated attacker to save JavaScript in the "A or SIC Number" field within the Project Setup functionality. The JavaScript is executed whenever another user views the project. Fixed in OPEXUS eCASE Audit 11.14.2.0.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7