VertiGIS WebOrderSystem through 7.0.8.6 has multiple XSS flaws
SEC Consult lists CVE-2026-4950, CVE-2026-4951 and CVE-2026-4952; the fixed version is unknown.
48
CVE-2026-4950
XSS in VertiGIS WebOrderSystem CustomerAdministration portal
- CVSS 4.0
- 4.8 medium
- EPSS
- —
- Published
- ·
- Modified
AI analysisSummaries by Vani AI
Cross-site scripting in VertiGIS WebOrderSystem's CustomerAdministration portal (KundenManager) lets privileged users inject JavaScript via properties like secondName when editing users. The script runs in the browser of other privileged portal users viewing the entry or overview. An authenticated attacker can execute code in other users' sessions. Other portal users are affected.
What to do: Apply VertiGIS update for CVE-2026-4950. No fixed version given.
| Product | Affected |
|---|---|
| VertiGIS WebOrderSystem | 7.0.8.6 |
Estimated exposure
No basis for an estimate.
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
The CustomerAdministration portal (KundenManager) of VertiGIS WebOrderSystem allows privileged users to manage the employees of defined companies (user groups). User properties, for example the "secondName" parameter, can be filled with JavaScript code while editing a user. The code is stored and executed in the browser of any other privileged user who opens the edited user entry or the user overview of the corresponding user group. An authenticated attacker with access to the portal can use this to run script code in the session of other portal users. Version 7.0.8.6, the latest available at the time of testing, is affected. The vendor did not provide information about further affected versions.
- Weakness
- CWE-79
- Vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X