Vulnerability · Published Jun 9, 2026 · Assigned by CERTVDE
CVE-2026-41031A Stored Cross-Site Scripting (XSS) vulnerability occurs in Vinna Process Monitor
High 8.7
In plain English
A high-severity cross-site scripting in Vinna Process Monitor from Skilja GmbH. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 15% of all known vulnerabilities).
Severity (CVSS 3.1)8.7High
Exploit odds (30 days)0.2%top 84.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A Stored Cross-Site Scripting vulnerability in Vinna Process Monitor Version 4.0 Service Pack 1 (Build 63255) allows an authenticated remote attacker with low privileges to inject malicious JavaScript code into the application. This enables attackers to steal administrative access tokens and session credentials.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Skilja GmbH | Vinna Process Monitor | 3.1.2 – before 4.0.6 |
Weakness: CWE-79 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N