CVE 4.8 MEDIUM

code-projects Simple Content Management System welcome.php cross site scripting_CVE-2026-6184

4.8 / 10
MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P

Description

A weakness has been identified in code-projects Simple Content Management System 1.0. This affects an unknown part of the file /web/admin/welcome.php. Executing a manipulation of the argument News Title can lead to cross site scripting. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.

Basic Information

ID CVE-2026-6184
Source VulDB
Published Apr 13, 2026 at 15:00

Affected Product

Vendor code-projects
Product Simple Content Management System
Version 1.0
Affected Versions code-projects Simple Content Management System 1.0

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.