CVE-2026-5698 is a stored Cross-Site Scripting (XSS) vulnerability in the SABBATIC application. It allows an attacker to inject and store malicious JavaScript code via the 'titulo_es' and 'add_etiquetas[]' parameters on the '/categorías' endpoint. When a user views the affected page, the stored script executes in their browser. The vulnerability has a medium severity rating with a CVSS score of 4.8. No affected versions or patches are explicitly stated in the available data.