{"id":"CVE-2026-89191","published":"2026-10-08T09:16:42.413","lastModified":"2026-10-08T21:35:53.890","description":"Unsanitised input in\nthe \"template name\" field of SQLView KRIS's Workflow Template feature\nis rendered in \"onclick\" attributes on the main dashboard without\nproper server-side sanitisation, allowing an attacker with administrative\naccess to inject and store malicious scripts that execute in the browsers of\naffected users.","cvssScore":6.8,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-79"],"vendors":[],"products":[],"references":[{"url":"https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-136/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}