{"id":"CVE-2026-113465","published":"2026-10-20T09:17:09.473","lastModified":"2026-10-20T19:35:23.397","description":"It is possible to execute a DOM-based Cross-Site Scripting attack against Stormshield’s web administration panel.\n\n\n\nTo exploit this vulnerability, an attacker would need to craft a URL containing a malicious script payload within a specific parameter and lure an authenticated administrator into visiting that link.","cvssScore":6.6,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N","cwes":["CWE-79"],"vendors":[],"products":[],"references":[{"url":"https://advisories.stormshield.eu/2026-022/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}