SQLView SQLView KRIS vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting SQLView SQLView KRIS: 1 record(s), with affected versions and fixes.
CVE-2026-89191
Medium · 6.8
CWE-79 Oct 8, 2026
Stored Cross-Site Scripting in SQLView KRIS
Unsanitised input in
the "template name" field of SQLView KRIS's Workflow Template feature
is rendered in "onclick" attributes on the main dashboard without
proper server-side sanitisation, allowing an attacker with administrative
access to inject and store malicious scripts that execute in the browsers of
affected users.