TI-2026-12215 CVE-2026-14449 · GHSA-5vjc-525r-rgvh
POST-based reflected XSS via the thanks parameter in form components
Priority LOW 29
u5CMS through v12.8.8 is vulnerable to reflected XSS via the ‘thanks’ parameter in multiple form components
No u5CMS vulnerabilities are listed in CISA KEV.
1 record
u5CMS through v12.8.8 is vulnerable to reflected XSS via the ‘thanks’ parameter in multiple form components