CVE-2026-40479

Kimai is an open-source time tracking application. In versions 1.16.3 through 2.52.0, the escapeForHtml() function in KimaiEscape.js does not escape double quote or single quote characters. When a user's profile alias is inserted into an HTML attribute context via the team member form prototype and rendered through innerHTML, this incomplete escaping allows HTML attribute injection. An authenticated user with ROLE_USER privileges can store a malicious alias that executes JavaScript in the browser of any administrator viewing the team form, resulting in stored XSS with privilege escalation. This issue has been fixed in version 2.53.0.

• CWE-79

• https://github.com/kimai/kimai/releases/tag/2.53.0Product, Release Notes
• https://github.com/kimai/kimai/security/advisories/GHSA-g82g-m9vx-vhjgExploit, Vendor Advisory

Published

Apr 17, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-40472In hackage-server, user-controlled metadata from .cabal file…9.9
• CVE-2026-40473The camel-mina component's MinaConverter.toObjectInput(IoBuf…8.8
• CVE-2026-40474wger is a free, open-source workout and fitness manager. In …7.6
• CVE-2026-40476graphql-go is a Go implementation of GraphQL. In versions 15…7.5
• CVE-2026-40477Thymeleaf is a server-side Java template engine for web and …9
• CVE-2026-40478Thymeleaf is a server-side Java template engine for web and …9
• CVE-2026-4048OS Command Injection Remote Code Execution Vulnerability in …7.2
• CVE-2026-40480ChurchCRM is an open-source church management system. In ver…7.1
• CVE-2026-40481monetr is a budgeting application for recurring expenses. In…7.5
• CVE-2026-40482ChurchCRM is an open-source church management system. Versio…7.1
• CVE-2026-40483ChurchCRM is an open-source church management system. In ver…5.4
• CVE-2026-40484ChurchCRM is an open-source church management system. In ver…9.1