CVE-2026-29598
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Apr 01, 2026
Vendor
unknown
Description
Multiple stored cross-site scripting (XSS) vulnerabilities in the submit_add_user.asp endpoint of DDSN Interactive Acora CMS v10.7.1 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the First Name and Last Name parameters.