CVE-2026-38669

Description

wCMS v.1.4 is vulnerable to Cross Site Scripting (XSS) when creating a new blog.

PUBLISHED Reserved 2026-04-06 | Published 2026-05-04 | Updated 2026-05-04 | Assigner mitre

References

github.com/thv930/yumeng_wu/tree/main/1/readme.md exploit

github.com/thv930/yumeng_wu/tree/main/1/readme.md

cve.org (CVE-2026-38669)

nvd.nist.gov (CVE-2026-38669)

Download JSON