TI-2026-69465 CVE-2026-89191 · GHSA-j7ff-q3f2-v94q
Stored cross-site scripting in SQLView KRIS workflow templates
Priority LOW 32
Unsanitised input in the "template name" field of SQLView KRIS's Workflow Template feature is rendered in "onclick" attributes on the main dashboard without proper server-side sanitisation, allowing an attacker with admi…