medium4.8
CVE-2026-5700
Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an attacker to store JavaScript code so that when a user views the page, co…
Impact
Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an attacker to store JavaScript code so that when a user views the page, code can be executed in the victim's browser. The list of assigned parameters and identifiers is as follows: parameter 'observaciones' in /mis-gastos endpoint.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| SABBATIC | SABBATIC App | Version versions prior to 7.96.0.1 y 7.96.0.2 |