CVE-2026-88261

The vulnerability in bizwell xClick, specifically in versions R2, R3, and R3.1, arises from improper input validation, enabling Stored Cross-Site Scripting (XSS) attacks. This flaw could allow an attacker to inject malicious scripts that execute in the context of users' browsers, potentially compromising sensitive data or session integrity. Organizations utilizing these versions of xClick should prioritize remediation to mitigate the risk of exploitation.