CVE-2026-32868

CVE-2026-32868 is a medium-severity Cross-Site Scripting (XSS) vulnerability affecting OPEXUS eComplaint and eCASE versions prior to 10.2.0.0. An authenticated attacker can inject malicious script into the 'first name' and 'last name' fields, which executes when a victim views the rendered full name. This allows the attacker to run arbitrary script in the context of a victim's session, potentially leading to session hijacking or data theft. The attack requires user interaction and prior authentication, contributing to its CVSS score of 5.5. There is currently no evidence of active exploitation, public exploit code, or significant community discussion regarding this vulnerability.