Description
A vulnerability has been found in idcCMS 1.70. Affected is an unknown function of the file admin/member_deal.php. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | idcCMS | 1.70 | — |
References
- VDB-416592 | idcCMS member_deal.php cross site scripting vdb-entry
- VDB-416592 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- CVE-2026-108815 | CVE Analysis and Report third-party-advisory
- Submit #964056 | 福州网钛软件科技有限公司 idccms V1.70 XSS vulnerability third-party-advisory
- https://github.com/ants01/idccmsV1.70_An-XSS_vulnerability_exists exploit