PT-2026-95871 · Olivier Ls · Php-Fts

Summmm

·

CVE-2026-93956

·

Published

2026-09-19

·

Updated

2026-09-20

CVSS v2.0

4.0

Medium

VectorAV:N/AC:L/Au:S/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions olivier-ls PHP-FTS versions prior to 1.1.3
Description A flaw in the Search Engine component allows remote attackers to perform cross-site scripting (XSS) by manipulating the Query argument. The issue resides within the SearchEngine::buildHighlights() function located in the src/SearchEngine.php file.
Recommendations Upgrade to version 1.1.3.

Exploit

Fix

Code Injection

XSS

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-94CWE-79

Related Identifiers

CVE-2026-93956

Affected Products

Php-Fts