CVE-2026-82326

MediumCVSS 4.1

Published: 28/09/2026(UTC)Updated: 28/09/2026(UTC)Translated: 28/09/2026(UTC)NVD NIST

Summary

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Enocta Educational Technologies Inc. Enocta Platform allows XSS Targeting HTML Attributes. This issue affects Enocta Platform through 2026-09-28.

Risk Assessment

An XSS attack may allow execution of malicious script in the user's browser, theft of session or authentication data. The risk is particularly relevant for users of the educational platform.

Recommendation

Update Enocta Platform to a version containing the fix or implement additional input sanitization mechanisms. Also implement security headers such as Content-Security-Policy.

Other vulnerabilities in Enocta Platform

CVE-2026-82323High
Authorization bypass through User-Controlled key vulnerability in Enocta Platform by Enocta Educational Technologies Inc. Allows exploitation of trusted identifiers. The issue affects versions through 2026-09-28.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS