Medium
5.1
WidzialniCMS is vulnerable to Reflected XSS in the /index.php endpoint. An attacker can prepare...
CVE-2026-112204
First seen on SecPulse
Affected packages
| Package | Affected → Fixed | |
|---|---|---|
| Fundacja WidzialniWidzialniCMS |
< 2.5→ 2.5 |
2.5 |
Original description The description as published by the source.
WidzialniCMS is vulnerable to Reflected XSS in the /index.php endpoint. An attacker can prepare an URL that, when opened, results in arbitrary JavaScript execution in the victim's browser, allowing e.g session cookie theft.
This issue has been fixed in version 2.5.
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
References
- web cvd@cert.pl
- web cvd@cert.pl
- web nvd.nist.gov
- web github.com