CVE-2026-112869: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Noah Hearle We’re Open!
Affects Noah Hearle We’re Open!Source CVE Database V5
- Exploitation
Not in CISA KEV, no exploitation reported
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:LWhat to do
AI-suggested
No official patch or remediation information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider applying input validation and output encoding controls to mitigate reflected XSS risks.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| Noah HearleWe’re Open! | Affected
| Fixed in– |
Description
CVE-2026-112869 is a reflected cross-site scripting (XSS) vulnerability in the Noah Hearle We’re Open! opening-hours component. It affects versions from 0 up to but not including 2.7. The vulnerability allows improper neutralization of input during web page generation, potentially enabling an attacker to execute arbitrary scripts in the context of the affected web application.