CVE-2026-52307

An authenticated stored cross-site scripting (XSS) vulnerability in the Column Management component of ClassCMS 1CMS v5.6 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the title field.

Score
CVSS 3.1 5.4 Medium
Status
Deferred - cve@mitre.org
Published
2026-09-08
Last modified
2026-09-14
Weaknesses
CWE-79

References

 
 
© AVABIS GmbH privacypolicy about