PT-2026-30669 · Salesforce · Workbench

Therealshakesbear

·

CVE-2026-34951

·

Published

2026-04-06

·

Updated

2026-04-06

CVSS v3.1

6.1

Medium

VectorAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Workbench versions prior to 65.0.0
Description Workbench, a suite of tools for interacting with Salesforce.com organizations via the Force.com APIs, contains a reflected cross-site scripting issue. The vulnerability occurs because the footerScripts parameter does not properly sanitize user-supplied input before it is included in the page response, leading to potential cross-site scripting (XSS) attacks.
Recommendations Update Workbench to version 65.0.0 or later.

Exploit

Fix

XSS

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2026-34951
GHSA-J94X-H584-RJF9

Affected Products

Workbench