CVE-2026-96739

Name of the Vulnerable Software and Affected Versions SEMCMS versions prior to 4.3

Description A flaw exists in the KindEditor Upload Interface component within the file '/Edit/php/upload json.php'. Remote manipulation of the imgFile argument allows for cross-site scripting, a technique where malicious scripts are injected into trusted websites.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Restrict access to the file '/Edit/php/upload json.php' to minimize the risk of exploitation.