Skip to content
CVE PROGRAM SOURCE RECORD6.4 Medium

CVE-2026-14449

POST-based reflected XSS via the thanks parameter in form components

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
NCSC.ch

Description

u5CMS through v12.8.8 is vulnerable to reflected XSS via the ‘thanks’ parameter in multiple form components

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

u5CMS u5CMS

Default version status: unaffected

  • 0 to ≤ 12.8.8affected

References