CVE-2026-6953 — Multiple vulnerabilities in Intermark IT's WebControl CMS

CVE-2026-6953

Multiple vulnerabilities in Intermark IT's WebControl CMS PUBLISHED

Description (CNA)

HTML injection vulnerability in Intermark IT's WebControl CMS v3.5. This vulnerability allows an attacker to send an email containing malicious HTML code to a victim via the contact form. To exploit this vulnerability, the attacker must send a request using the 'nombreApellidos', 'dirección ', and 'comentarios ' parameters to '/processContact.do'.

Affected (CNA)

Vendor / product	Versions
Intermark IT / WebControl CMS	affected 0 before *

CWE

CWE-79

References

https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-intermark-its-webcontrol-cms

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.