CVE-2026-5005

The OKRs & Goals application from Twiser Informatics Technology Consulting is vulnerable to a stored cross-site scripting (XSS) attack due to improper input handling during web page generation. This vulnerability could allow an attacker to inject malicious scripts that execute in the context of a user's session, potentially compromising sensitive data or user accounts. Organizations using versions 28220 through 28398 should prioritize remediation to mitigate the risk of exploitation.