Skip to content
CVE PROGRAM SOURCE RECORD4.8 Medium

CVE-2026-71189

Toptech TMS7 and TopHAT Cross-site Scripting

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

An attacker can construct a request that, if issued by another application user, will cause JavaScript code supplied by the attacker to execute within the user's browser in the context of that user's session with the application.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Toptech Systems TMS7

Default version status: unaffected

  • 7.6.3affected
  • 7.8unaffected

Toptech Systems TopHAT

Default version status: unaffected

  • 7.6.3affected
  • 7.8unaffected

References