XSS in Watchguard Dimension

CVE-2026-78047

A stored cross-site scripting (XSS) vulnerability in WatchGuard Dimension's task scheduling feature allows a low-privileged authenticated administrator to inject arbitrary HTML/JavaScript into these fields, which then executes in the browser session of any other user.

Vulnerability class: XSS (Cross-Site Scripting)

Affected products

Weakness classification (CWE)

References