Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Stored cross-site scripting (XSS) in BloX widgets. The /api/dashboards/<id>/widgets/<id> API accepts HTML and JavaScript content in the ‘desc’ and ‘text’ parameters. The code entered is executed in the browser when the widget is rendered, which could compromise the confidentiality of the information accessible in that context.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-117493 describes a stored cross-site scripting (XSS) vulnerability within the BloX widgets feature of the Sisense Cloud BI Platform. The flaw resides in the `/api/dashboards/<id>/widgets/<id>` API... #Sisense #CloudBIPlatform #XSS #CVE #InfoSec https://cvetodo.com/cve/CVE-2026-117493