CVE-2026-5699

UNKNOWN 0.0

Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an attacker to store JavaScript code so that when a user views the page, code can be executed in the victim's browser. The list of assigned parameters and identifiers is as follows: parameter 'companyName' in /empresa endpoint;

CWE	CWE-79
Vendor	sabbatic
Product	sabbatic app
Published	Oct 29, 2026

Stay Ahead of the Next One

Get instant alerts for sabbatic sabbatic app

Be the first to know when new unknown vulnerabilities affecting sabbatic sabbatic app are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

SABBATIC / SABBATIC app

versions prior to 7.96.0.1 y 7.96.0.2

References

NVD ↗ CVE.org ↗ EPSS Data ↗

incibe.es: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-sabbatic-application

Credits

David Padilla Alvarado Víctor Manuel Pérez Cámara