Description
u5CMS through v12.8.8 is vulnerable to reflected XSS via the ‘thanks’ parameter in multiple form components
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| u5CMS | u5CMS | ≤ 12.8.8 | — |
Medium · 6.4
CVE-2026-14449
EUVD-2026-41325GHSA-5vjc-525r-rgvh
POST-based reflected XSS via the thanks parameter in form components
Published Jul 2, 2026 · Updated Jul 2, 2026 · Assigned by NCSC.ch