VYPR
← All advisories
High severity7.6NVD Advisory· Published Mar 10, 2026· Updated Jun 17, 2026

CVE-2026-30918

CVE-2026-30918

Description

facileManager is a modular suite of web apps built with the sysadmin in mind. Prior to 6.0.4 , a reflected XSS occurs when an application receives data from an untrusted source and uses it in its HTTP responses in a way that could lead to vulnerabilities. It is possible to inject malicious JavaScript code into a URL by adding a script in a parameter. This vulnerability was found in the fmDNS module. The parameter that is vulnerable to an XSS attack is log_search_query. This vulnerability is fixed in 6.0.4.

Affected products

3
  • Facilemanager/Facilemanager3 versions
    cpe:2.3:a:facilemanager:facilemanager:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:facilemanager:facilemanager:*:*:*:*:*:*:*:*range: <6.0.4
    • (no CPE)range: <6.0.4
    • (no CPE)range: < 6.0.4

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.