CVE-2026-38669

wCMS v.1.4 is vulnerable to Cross Site Scripting (XSS) when creating a new blog.

medium 6.1 CVSS 3.1
Published: May 4, 2026
Modified: May 5, 2026

Description

wCMS v.1.4 is vulnerable to Cross Site Scripting (XSS) when creating a new blog.

References