Report: Breaking: CVE-2026-3877 - Reflected Cross-Site Scripting in Dashboard Search

Report: Breaking: CVE-2026-3877 - Reflected Cross-Site Scripting in Dashboard Search

CVE ID :CVE-2026-3877 Published : April 1, 2026, 2:16 p.m. | 25 minutes ago Description :A reflected cross-site scripting (XSS) vulnerability in the dashboard search functionality of the VertiGIS FM solution allows attackers to craft a malicious URL, that if visited by an authenticated victim, will execute arbitrary JavaScript in the victim's context. Such a URL could be delivered through various means, for instance, by sending a link or by tricking victims to visit a page crafted by the attacker. Severity: 7.3 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
HIGH
Published
April 1, 2026
Impact: XSS