CVE-2026-78047 — Dimension Stored XSS in Scheduled Report Task

CVE-2026-78047

Dimension Stored XSS in Scheduled Report Task PUBLISHED

Description (CNA)

A stored cross-site scripting (XSS) vulnerability in WatchGuard Dimension's task scheduling feature allows a low-privileged authenticated administrator to inject arbitrary HTML/JavaScript into these fields, which then executes in the browser session of any other user.

Affected (CNA)

Vendor / product	Versions
WatchGuard / Dimension	affected 2.0 before 2.3.1

CWE

CWE-79

References

https://psirt.watchguard.com/CVE-2026-78047

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.