Advisory moved

This disclosure was assigned CVE-2026-94211 and is now published in the Thoropass Vulnerability Research Program archive.

CVE-2026-94211
--- ## Where it went |   |   | |:---|:---| | **CVE ID** | [CVE-2026-94211](https://www.cve.org/CVERecord?id=CVE-2026-94211) | | **VulDB** | [VDB-408069](https://vuldb.com/?id=408069) | | **Advisory** | [CVE-2026-94211 - Leantime - Stored XSS in Project Status Labels Enables Privilege Escalation to Owner](https://github.com/heylaika/vuln-research-program/tree/main/2026/CVE-2026-94211%20-%20Leantime%20-%20Stored%20XSS%20in%20Project%20Status%20Labels%20Enables%20Privilege%20Escalation%20to%20Owner) | | **Archive** | [heylaika/vuln-research-program](https://github.com/heylaika/vuln-research-program) | This path is kept as a permanent pointer because it was referenced in the original coordinated-disclosure submission. Do not delete or rename it: external references (VulDB, the CVE record, third-party mirrors) still resolve here.