CVE-2026-29598

n/a / n/a PUBLISHED

Description (CNA)

Multiple stored cross-site scripting (XSS) vulnerabilities in the submit_add_user.asp endpoint of DDSN Interactive Acora CMS v10.7.1 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the First Name and Last Name parameters.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://github.com/padayali-JD/CVE-2026-29598

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.