CVE-2026-41031

CVSS Score & Metrics

Base Score

8.7 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N                                    

Vulnerability Description

A Stored Cross-Site Scripting vulnerability in Vinna Process Monitor Version 4.0 Service Pack 1 (Build 63255) allows an authenticated remote attacker with low privileges to inject malicious JavaScript code into the application. This enables attackers to steal administrative access tokens and session credentials.

Vulnerability Details

Published Date

June 09, 2026

Last Modified

June 09, 2026

CWE ID

CWE-79

Source

NVD

Vendor

Skilja GmbH

Product

Vinna Process Monitor

External References

https://partner.skilja.com/uncategorized/security-advisory-stored-xss-in-vinna-process-monitor-cve-2026-41031/

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment