CVE-2026-85382

Name of the Vulnerable Software and Affected Versions light0011 cms (affected versions not specified)

Description An issue exists in the Chapter Content Output component within the file App/Home/View/Default/Chapter/oneChapter.tpl. The htmlspecialchars decode() function fails to properly handle the content argument, allowing for remote cross-site scripting (XSS), a technique where malicious scripts are injected into trusted websites.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict the use of the content argument in the App/Home/View/Default/Chapter/oneChapter.tpl file to minimize the risk of exploitation.