Bug 2569131 (CVE-2026-112204)
| Summary: | CVE-2026-112204 WidzialniCMS: WidzialniCMS: Reflected cross-site scripting via /index.php endpoint | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | OSIDB Bzimport <bzimport> |
| Component: | vulnerability-draft | Assignee: | Product Security DevOps Team <prodsec-dev> |
| Status: | NEW --- | QA Contact: | |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | unspecified | Keywords: | Security |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | --- | |
| Doc Text: |
A flaw was found in WidzialniCMS. A remote attacker can exploit this vulnerability by tricking a user into opening a specially crafted web address targeting the /index.php endpoint. This flaw leads to reflected cross-site scripting (XSS), allowing the attacker to execute arbitrary script code within the victim's browser session. An attacker could use this access to hijack user accounts or steal sensitive information, such as session cookies.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
OSIDB Bzimport
2026-11-09 13:01:17 UTC
|