Cross-Site Scripting Vulnerability in Repasat Application

CVE-2026-59671

What is CVE-2026-59671?

The Repasat application contains a Cross-Site Scripting vulnerability, particularly in the endpoint '/es/datatables/getemployeetypesdatatable'. Exploiting this flaw allows attackers to inject malicious scripts into the browser of unsuspecting users, potentially executing arbitrary code. This could lead to unauthorized actions being taken within the user's context, exposing sensitive data and compromising system integrity. It is crucial for users and administrators of the Repasat application to implement appropriate security measures to mitigate this risk.

References