Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw has been found in horilla-opensource horilla up to 1.0.2. Impacted is an unknown function of the file static/assets/js/global.js of the component Leads Module. This manipulation of the argument Notes causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been published and may be used. Upgrading to version 1.0.3 is recommended to address this issue. Patch name: fc5c8e55988e89273012491b5f097b762b474546. It is suggested to upgrade the affected component.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-3050 Cross-Site Scripting Vulnerability in Horilla Open Source Leads Module 1.0.2 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-3050
Post summary
A Cross‑Site Scripting vulnerability (CVE‑2026‑3050) was disclosed in the Horilla Open Source Leads Module 1.0.2, with details available on Vulmon.
CVE-2026-3050 A flaw has been found in horilla-opensource horilla up to 1.0.2. Impacted is an unknown function of the file static/assets/js/global.js of the component Leads Module. T… https://www.cve.org/CVERecord?id=CVE-2026-3050
Post summary
A new CVE-2026-3050 vulnerability has been disclosed, affecting horilla-opensource horilla up to version 1.0.2, specifically an unknown function in the static/assets/js/global.js file of the Leads Module.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | horilla | horilla | - | - | - |