CVE-2026-114697: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in QuarkA QA Analytics
Affects QuarkA QA AnalyticsSource CVE Database V5
- Exploitation
Not in CISA KEV, no exploitation reported
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:LWhat to do
AI-suggested
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider applying input validation and output encoding controls where possible to mitigate the risk of stored XSS.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| QuarkAQA Analytics | Affected
| Fixed in– |
Description
CVE-2026-114697 is a stored cross-site scripting (XSS) vulnerability in QuarkA QA Analytics affecting versions from initial release up to 5.3.0.1. The flaw involves improper neutralization of input during web page generation, which could allow an attacker to inject malicious scripts. The vulnerability has a high severity with a CVSS score of 7.1. No official patch or remediation details are provided in the available data.