CVE-2026-4950 Details
Description
The CustomerAdministration portal (KundenManager) of VertiGIS WebOrderSystem allows privileged users to manage the employees of defined companies (user groups). User properties, for example the "secondName" parameter, can be filled with JavaScript code while editing a user. The code is stored and executed in the browser of any other privileged user who opens the edited user entry or the user overview of the corresponding user group. An authenticated attacker with access to the portal can use this to run script code in the session of other portal users. Version 7.0.8.6, the latest available at the time of testing, is affected. The vendor did not provide information about further affected versions.
A stored cross-site scripting vulnerability has been identified in the CustomerAdministration portal of VertiGIS WebOrderSystem, specifically in version 7.0.8.6. This vulnerability allows authenticated users with privileges to manage employee details to inject JavaScript code into user properties. The injected code is executed in the browsers of other privileged users who access the modified user entry or the user overview for the corresponding group. Additionally, a similar stored cross-site scripting vulnerability exists in the OrderAdministration portal, where injected scripts can be executed in the context of high-privileged users.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 23, 2026CISA-ADP
Assessed Oct 28, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://r.sec-consult.com/vertigis | SEC Consult Vulnerability Lab | AdvisoryBundleExploitRemedy |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | SEC Consult Vulnerability Lab |
Affected Products
| Product | Versions |
|---|---|
| VertiGIS WebOrderSystem | <= 7.0.8.6 |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 28, 2026 | CVE Modified | CISA-ADP |
| Oct 23, 2026 | New CVE Received | SEC Consult Vulnerability Lab |