PT-2026-31558 · Unknown · Simple It Discussion Forum

Christychen11 · CVE-2026-5826 · Published 2026-04-09 · Updated 2026-04-09

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Simple IT Discussion Forum version 1.0

Description A flaw exists in the processing of the /edit-category.php file within Simple IT Discussion Forum 1.0. Manipulation of the Category argument can lead to cross site scripting. The attack can be launched remotely and an exploit has been published.

Recommendations For Simple IT Discussion Forum version 1.0, carefully sanitize the Category argument in the /edit-category.php file to prevent cross site scripting.

Exploit

Fix

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2026-5826

Affected Products

Simple It Discussion Forum

References · 10

• 🔥 https://github.com/lonelyuan/vunls/issues/9 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-5826 · Security Note
• https://vuldb.com/vuln/356273 · Note
• https://twitter.com/CVEnew/status/2042186500436324646 · Twitter Post
• https://vuldb.com/submit/788335 · Note
• https://code-projects.org · Note
• https://twitter.com/CVEarity/status/2042283681881211074 · Twitter Post
• https://vuldb.com/vuln/356273/cti · Note
• https://twitter.com/infoflowcloud/status/2042187885789487458 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2042108616606466447 · Twitter Post