Description
Cross Site Scripting vulnerability in Squirro Cognitive Search < 3.14.2 allows a remote attacker to execute arbtirary code via the Email Notification, Create Evaluation Sets and HTML Editor functions.
CVSS 6.1EPSS 0.184%Risk 0.62
View source- Published
- 2026-08-17 18:17:09
- Affected versions
- <3.14.2
- Type
- Web application
- Last modified
- 2026-08-17 21:16:45
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N