CVE-2026-26724
Cross Site Scripting vulnerability in Key Systems Inc Global Facilities Management Software v. 20230721a allows a remote attacker to execute arbitrary code via the selectgroup a…
Published: 2026-02-20 · CVSS: 7.6 · CVSS 3.1
Cross Site Scripting vulnerability in Key Systems Inc Global Facilities Management Software v. 20230721a allows a remote attacker to execute arbitrary code via the selectgroup and gn parameters on the /?Function=Groups endpoint.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7