CVE-2026-82326: HTML Injection in Enocta Educational's Enocta Platform
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Enocta Educational Technologies Inc. Enocta Platform allows XSS Targeting HTML Attributes.
This issue affects Enocta Platform: through 2026-09-28.
Affected Software
Event History
Frequently Asked Questions
What level of access and interaction are required for exploitation?
An attacker needs low-privileged access and must persuade a user to interact with attacker-controlled content. The attack can be performed over the network and has low attack complexity.
What is the expected security impact?
The vulnerability can affect integrity beyond the vulnerable component's security authority. The provided scoring indicates no confidentiality or availability impact, with a low integrity impact.
Which versions should be investigated?
The issue is reported to affect Enocta Platform through 2026-09-28. Organizations using that product should verify their deployed version and consult the vendor or referenced advisory for remediation information.