Froiden TableTrack through 1.3.10 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject arbitrary HTML and JavaScript through the order notes field without sanitization.
Worksuite SaaS versions prior to 6.0.14 contains a stored cross-site scripting vulnerability in the Asset Management module that allows authenticated administrators to inject arbitrary JavaScript by entering malicious pa…
CVSS 4.0MEDIUM 4.6·Network·High privileges·User interaction·EPSS 0.00251·Published 2026-08-13·Fixed in 6.0.14CWE-79