CVE-2026-33240 | Combodo iTop up to 3.2.2 Foreign Key Search Criteria API cross site scripting

August 21, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in Combodo iTop up to 3.2.2. This issue affects some unknown processing of the component Foreign Key Search Criteria API. This manipulation causes cross site scripting.

This vulnerability is registered as CVE-2026-33240. Remote exploitation of the attack is possible. No exploit is available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More