CVE Catalog
CVE-2026-18247
MediumCVSS 5.3Summary
A Cross Site Scripting (XSS) vulnerability in AtHoc IWS Web Portals before version 7.21 HF-734 could allow an attacker to execute actions in the context of the victim's session.
Risk Assessment
Risk of session hijacking and unauthorized actions in the system.
Recommendation
Update AtHoc IWS to version 7.21 HF-734 or later with security fixes.
Original NVD description (English source)
A Cross Site Scripting (XSS) vulnerability in the Web Portals of AtHoc IWS in versions earlier than 7.21 HF-734 could allow an attacker to potentially execute actions in the context of the victim's session.