XSS Vulnerability in OPEXUS eComplaint and eCASE Products

CVE-2026-32868

What is CVE-2026-32868?

In versions of OPEXUS eComplaint and eCASE prior to 10.2.0.0, the application fails to properly sanitize user inputs in the 'My Information' section, specifically in the first and last name fields. This allows an authenticated attacker to inject malicious scripts that can be executed in the context of the victim's session, compromising the security and integrity of user data. It highlights the importance of implementing robust sanitization methods to safeguard against XSS attacks in web applications.

References