PT-2026-64845 · Unknown · Smart Manager

Truonglv1 · CVE-2026-14203 · Published 2026-07-27 · Updated 2026-07-27

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Medium

Base vector

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Smart Manager versions prior to 8.92.0

Description Insufficient encoding of a post field before it is rendered into an HTML attribute within the management grid allows users with the Contributor role or higher to perform a Stored Cross-Site Scripting (XSS) attack. This enables the injection of JavaScript that executes in the browser session of an administrator viewing the grid.

Recommendations Update Smart Manager to version 8.92.0 or later.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2026-14203

Affected Products

Smart Manager

References · 3

• 🔥 https://wpscan.com/vulnerability/efcaa453-80f3-4565-a4f8-eefa231d77b6 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-14203 · Security Note
• https://t.me/CVEtracker/61301 · Telegram Post