Skip to content
OpenAdvisories

Product · vincent-peugnet

wcms

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2026-105124

    W (wcms) through 3.18.0 Unauthenticated Stored XSS via Login Username and Comments

    W (vincent-peugnet/wcms) through 3.18.0 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts via the login user field and visitor comment website field. Attackers can submit failed logins rendered unesca…

    vincent-peugnet wcms