Filtered by vendor Cloud Bi Platform Subscriptions
Filtered by product Sisense Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-117493 2 Cloud Bi Platform, Sisense 2 Sisense, Cloud Bi Platform 2026-10-29 N/A
Stored cross-site scripting (XSS) in BloX widgets. The /api/dashboards/<id>/widgets/<id> API accepts HTML and JavaScript content in the ‘desc’ and ‘text’ parameters. The code entered is executed in the browser when the widget is rendered, which could compromise the confidentiality of the information accessible in that context.