CVE-2026-30819 — Combodo iTop: Reflected XSS in /pages/ajax.render.php dashboard_id parameter
Combodo iTop is a web based IT service management tool. Prior to 3.2.3, iTop has a reflected Cross-Site Scripting (XSS) vulnerability in its dashboard revert functionality with …
Published: 2026-08-21 · CVSS: 7.3 · CVSS 3.1
Combodo iTop is a web based IT service management tool. Prior to 3.2.3, iTop has a reflected Cross-Site Scripting (XSS) vulnerability in its dashboard revert functionality with the parameter dashboard_id in /pages/ajax.render.php. This issue has been fixed in version 3.2.3.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7