Improper Input Validation Vulnerability in Bizwell xClick
CVE-2026-88261

5.1MEDIUM

Key Information:

Vendor

Bizwell

Status
Xclick
Vendor
CVE Published:
15 September 2026

What is CVE-2026-88261?

An improper input validation vulnerability in Bizwell's xClick application enables attackers to exploit stored cross-site scripting (XSS) flaws. This can compromise user data and system integrity, making it essential for users to apply available patches and updates to mitigate potential risks.

Affected Version(s)

xClick R2

xClick R3

xClick R3.1

References

https://www.bizwell.net/solutions/groupware

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.