CVE-2026-52307: Stored XSS in 1CMS v5.6

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-09-08 17:24 UTC
Importiert: 2026-09-08 18:19 UTC
CVSS: 5.4
Quelle-ID: full_disc
uid_hash: a828b7ef92424f9c846bc2f110645bad89a271fa4afb24b96b7369cc421af7e2

Full Disclosure

Posted by 懒-癌-症～ via Fulldisclosure on Sep 08 CVE-2026-52307: 1CMS v5.6 Authenticated Stored XSS Vulnerability

Vulnerability Description

An authenticated stored cross-site scripting (XSS) vulnerability exists in the Column Management component of ClassCMS

1CMS v5.6. Attackers can execute arbitrary web scripts or HTML by injecting a crafted payload into the title field.

CVE-ID	Severity (Quelle)	CVSS (Quelle)	Severity (CVE.org)	CVSS (CVE.org)	EPSS	EPSS-Pctl	Veroeffentlicht (CVE.org)
CVE-2026-52307	MEDIUM	5.4	MEDIUM	5.4			2026-09-08

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
Full Disclosure	full_disc	threat_intel		-	de	https://seclists.org/rss/fulldisclosure.rss