CVE-2026-31382

MEDIUM CVSS: 6.1 Published: 2026-03-20 Modified: 2026-06-17

Description

The error_description parameter is vulnerable to Reflected XSS. An attacker can bypass the domain's WAF using a Safari-specific onpagereveal payload.

Affected Platforms

Gainsight Assist

Weakness Type

CWE-79

References