Medium severity6.8NVD Advisory· Published Oct 24, 2026

CVE-2026-115993

Description

Stored XSS vulnerability in the “Notes” field of the Checklists in Cervantes version v1.3-beta could allow an attacker to execute arbitrary code in another user's browser with elevated privileges

Affected products

Cervantes/Checklistsllm-create
Range: v1.3-beta

Patches

Vulnerability mechanics

References

www.grayback.es/advisoriesnvd
www.grayback.es/en/advisoriesnvd

News mentions

No linked articles in our index yet.

cvss	0.442
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000