PT-2026-110510 · Undefined · Undefined

·

CVE-2026-108815

·

Published

2026-10-12

·

Updated

2026-10-12

CVSS v2.0

4.0

Medium

VectorAV:N/AC:L/Au:S/C:N/I:P/A:N
A vulnerability has been found in idcCMS 1.70. Affected is an unknown function of the file admin/member deal.php. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Exploit

Fix

XSS

Code Injection

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-108815

Affected Products

Undefined