CVE-2026-2546

CVSS v2.0

4.0

Vector

AV:N/AC:L/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions LigeroSmart versions up to 6.1.26

Description A security issue exists in LigeroSmart that allows for cross site scripting. The issue is related to manipulation of the

SortBy

argument in the

/otrs/index.pl

file within an unknown function. The attack can be launched remotely. The exploit has been publicly disclosed.

Recommendations Versions prior to 6.1.26 should be updated. As a temporary workaround, consider restricting or carefully validating the

SortBy

argument in the

/otrs/index.pl

file.

Exploit

Fix

XSS

Code Injection

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

CVE-2026-2546

Ligerosmart