← Database

CVE-2026-26724

HIGH CVSS: 7.6 Published: 2026-02-20 Modified: 2026-06-17

Description

Cross Site Scripting vulnerability in Key Systems Inc Global Facilities Management Software v. 20230721a allows a remote attacker to execute arbitrary code via the selectgroup and gn parameters on the /?Function=Groups endpoint.

Affected Platforms

Keystorage Global Facilities Management Software

Weakness Type

CWE-79, CWE-79

References