CVE-2026-112204
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Nov 09, 2026
Vendor
unknown
Description
WidzialniCMS is vulnerable to Reflected XSS in the /index.php endpoint. An attacker can prepare an URL that, when opened, results in arbitrary JavaScript execution in the victim's browser, allowing e.g session cookie theft. This issue has been fixed in version 2.5.