VULNERABILITY INTELLIGENCE

CVE-2026-14449

EPSS probability0.44%

CISA KEVNot currently listed

Published2026-07-02

Last modified2026-07-02

Description

u5CMS through v12.8.8 is vulnerable to reflected XSS via the ‘thanks’ parameter in multiple form components