Medium severityNVD Advisory· Published Nov 9, 2026
CVE-2026-112204
CVE-2026-112204
Description
WidzialniCMS is vulnerable to Reflected XSS in the /index.php endpoint. An attacker can prepare an URL that, when opened, results in arbitrary JavaScript execution in the victim's browser, allowing e.g session cookie theft.
This issue has been fixed in version 2.5.
Affected products
1- Range: >=2.5
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.