PT-2026-27434 · Icms · Icms

Wang Yiru + 1 · Publicado 2026-03-24 · Atualizado 2026-03-24 · CVE-2026-30661

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions iCMS version 8.0.0

Description The iCMS software contains a Cross-Site Scripting (XSS) issue in the User Management component. The issue is located within the index.html file and allows remote attackers to execute arbitrary web script or HTML. The attack vector involves the regip or loginip parameters.

Recommendations Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, sanitize the regip and loginip parameters before processing them.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2026-30661

Produtos afetados

Icms

Referências · 3

• 🔥 https://wang1rrr.github.io/2026/02/09/CVE-Report-iCMS-v8.0.0-XSS · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-30661 · Nota de Segurança
• https://twitter.com/VulmonFeeds/status/2036505937050022287 · Publicação no Twitter