CVE-2026-82326: HTML Injection in Enocta Educational's Enocta Platform

Severity: medium (CVSS 4.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-09-28 · updated 2026-09-28
Weakness: CWE-79

Description

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Enocta Educational Technologies Inc. Enocta Platform allows XSS Targeting HTML Attributes. This issue affects Enocta Platform: through 2026-09-28.

Affected products

Enocta Educational Technologies Inc. Enocta Platform: through 2026-09-28

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1199

Get alerted when CVE-2026-82326 or the next vulnerability affects your stack