https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-28T18:45:15.305721+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-40126 fkie_cve-2026-40126 2026-09-28T18:45:15.324604+00:00

OutSystems Service Center is vulnerable to a DOM-based Cross-Site Scripting (XSS) attack that can be exploited by a low-privileged attacker via the upload of a file with a malicious filename containing JavaScript code. The vulnerability exists in all locations where a file can be attached and prepared for upload to the server.

This issue was fixed in OutSystems Service Center version 11.41.2

 https://db.gcve.eu/vuln/ghsa-wpg4-f3mj-hxh3 GHSA-wpg4-f3mj-hxh3 2026-09-28T18:45:15.324711+00:00

OutSystems Service Center is vulnerable to a DOM-based Cross-Site Scripting (XSS) attack that can be exploited by a low-privileged attacker via the upload of a file with a malicious filename containing JavaScript code. The vulnerability exists in all locations where a file can be attached and prepared for upload to the server.

This issue was fixed in OutSystems Service Center version 11.41.2