CNNVD-202601-4947 Information

CNNVD ID

CNNVD-202601-4947

CVE-2026-1469

  • CNNVD Published: 2026-01-29

Description (Chinese)

RLE NOVA PlanManager是西班牙RLE NOVA公司的一款计划与调度管理软件。 RLE NOVA PlanManager存在跨站脚本漏洞,该漏洞源于对index.php文件中comment和brand参数输入清理不当,可能导致存储型跨站脚本攻击。

Description (English)

RLE NOVA PlanManager is a plan and dispatch management software for RLE NOVA in Spain. RLE NOVA PlanManager has a cross-site script loophole, which results from an inappropriate clean-up of the input of the input of the index.php file into the comment and Brand parameters, which may result in a storage-type cross-site script attack.

Hazard Level

High

Vulnerability Type

跨站脚本

Affected Vendor

RLE NOVA

Published

2026-01-29

Last Modified

2026-02-24

References

https://www.incibe.es/en/incibe-cert/notices/aviso/stored-cross-site-scripting-xss-rle-novas-planmanager

Share on: