← CVE Intelligence

CVE-2026-14449

POST-based reflected XSS via the thanks parameter in form components PUBLISHED

Description (CNA)

u5CMS through v12.8.8 is vulnerable to reflected XSS via the ‘thanks’ parameter in multiple form components

Affected (CNA)

Vendor / productVersions
u5CMS / u5CMSaffected 0 through 12.8.8

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.