CVE-2026-111048 - FOSSBilling: Low-privileged staff can run JavaScript in administrators' browsers via stored XSS in support ticket notes
CVE ID :CVE-2026-111048 Published : Nov. 2, 2026, 6:18 p.m. | 45 minutes ago Description :FOSSBilling is an open source billing and client-management platform. From 0.1.0 until 0.8.9, the admin/support/note_create endpoint stores the note parameter without sanitization in the...