What is GHSA-gmqc-8252-pqjp?

GHSA-gmqc-8252-pqjp is a security advisory published by GitHub Security Advisories with High severity. A Stored Cross-Site Scripting (XSS) vulnerability has been identified in OpenText Vendor Invoice...

Which CVE IDs does GHSA-gmqc-8252-pqjp cover?

GHSA-gmqc-8252-pqjp covers the following CVE IDs: CVE-2026-12559. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-gmqc-8252-pqjpHigh

A Stored Cross-Site Scripting (XSS) vulnerability has been identified in OpenText Vendor Invoice...

Vendor

GitHub Security Advisories

Published

September 24, 2026

Last Modified

September 24, 2026

🔗 CVE IDs covered (1)

CVE-2026-12559 →

📋 Description

A Stored Cross-Site Scripting (XSS) vulnerability has been identified in OpenText Vendor Invoice Management for SAP Solutions Capture Validation application. Under certain conditions, this issue could allow execution of unauthorized script content in a user's browser, potentially impacting confidentiality and integrity of information processed through the application.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-12559
https://support.opentext.com/csm?id=kb_article_view&sysparm_article=KB0869040
https://support.opentext.com/csm?id=ot_kb_unauthenticated&sysparm_article=KB0869044
https://github.com/advisories/GHSA-gmqc-8252-pqjp