CVE-2026-18741 is a stored cross-site scripting vulnerability in the Asset Management module of Worksuite SaaS versions prior to 6.0.14. Authenticated administrators can inject arbitrary JavaScript by entering malicious payloads into the Location and Description fields when creating a new asset. This allows attackers to store crafted HTML script tags in the application database that execute automatically [truncated]
CVE-2026-64828 is a stored cross-site scripting vulnerability in Froiden TableTrack through 1.3.10. The vulnerability allows unauthenticated attackers to inject arbitrary HTML and JavaScript through the order notes field without sanitization. Attackers can craft malicious payloads in customer order placement that execute in the admin's browser session when viewing order details, enabling session token the [truncated]
