CVE-2026-73641 — Multiple Reflected XSS in Dayforce ESS Excelity
Dayforce ESS Excelity is vulnerable to Reflected XSS in multiple endpoints. An attacker can prepare a specially crafted URL that, when opened, results in arbitrary JavaScript ex…
Published: 2026-09-28 · CVSS: 5.1 · CVSS 4.0
Dayforce ESS Excelity is vulnerable to Reflected XSS in multiple endpoints. An attacker can prepare a specially crafted URL that, when opened, results in arbitrary JavaScript execution in the victim's browser. This issue was fixed in version V4.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7