THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-4765 — Self Cross-Site Scripting (Self-XSS) vulnerability in the RD Station Conversas chat feature. The vulnerability lies in the ‘name’ parameter of the initialisation process due to incorrect sanitisation of user-supplied input. Exploitation allows specially crafted JavaScript code to

[NVD] CVE-2026-4765 — Self Cross-Site Scripting (Self-XSS) vulnerability in the RD Station Conversas chat feature. The vulnerability lies in the ‘name’ parameter of the initialisation process due to incorrect sanitisation of user-supplied input. Exploitation allows specially crafted JavaScript code to

lownvdPublished 2026-07-13

CVE-2026-4765 CVSS: None Published: 2026-07-13T11:16:27.450

Self Cross-Site Scripting (Self-XSS) vulnerability in the RD Station Conversas chat feature. The vulnerability lies in the ‘name’ parameter of the initialisation process due to incorrect sanitisation of user-supplied input. Exploitation allows specially crafted JavaScript code to be injected, which is executed within the context of the

MITRE ATT&CK techniques

JavaScriptT1059.007

Indicators of compromise

CVE-2026-4765cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-4765