CVE-2026-18741 is a stored cross-site scripting vulnerability in Froiden Worksuite SaaS affecting versions before 6.0.14. It occurs in the Asset Management module where authenticated administrators can inject arbitrary JavaScript into the Location and Description fields of new assets. This malicious code is stored in the application database and executed automatically in the browsers of users viewing the affected assets. The vulnerability allows attackers to perform actions such as session hijacking and credential theft by exploiting the trust of authenticated users. The CVSS 3.1 score is 4.8 (medium severity), reflecting network attack vector, low attack complexity, high privileges required, user interaction required, and partial confidentiality and integrity impact. No vendor advisory or patch information is currently available, and the service is not cloud-hosted, so remediation depends on vendor updates.

Successful exploitation allows an authenticated administrator to inject malicious scripts that execute in other users' browsers when they view affected assets. This can lead to session hijacking, credential theft, and unauthorized actions performed with the privileges of authenticated users. The impact affects confidentiality and integrity partially but does not affect availability. The vulnerability requires high privileges and user interaction to exploit.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict administrative access to trusted personnel only and consider monitoring for suspicious activity related to asset creation. Avoid viewing or sharing assets created by untrusted administrators. Follow vendor communications for updates on patches or official mitigations.