Skip to content
Heist/ feed
Medium

Stored Cross-Site Scripting in StockAgile by Novadigits technologies

Type: advisorySource: Official CVE List1 source record

Stored Cross-Site Scripting (XSS) vulnerability in StockAgile API and management panel. The vulnerability is present on the server side in REST endpoint ' /inventory/configuration/pricing-tiers' that allow the injection and persistence of malicious JavaScript code through parameters such as ‘code’, ‘name’, and other text fields. The scripts that are entered are not filtered or validated correctly before being displayed on the web panel that authenticated users can access. Exploiting this vulnerability could allow a remote, previously authenticated attacker to execute arbitrary JavaScript code.

Announced Source revision 1
Original source ↗

CVE-2026-6083

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-6083

StockAgile

Source reference: /containers/cna/affected/0/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "vendor": "Novadigits technologies",
    "product": "StockAgile",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "25/09/2026",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  }
]
Related CVEs
CVE-2026-6083

Source reference: /cveMetadata/cveId

Publisher severity

medium

Source reference: /containers/cna/metrics

Event
#2046 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement