CVE-2026-112204

UNKNOWN 0.0

Reflected XSS in WidzialniCMS

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

WidzialniCMS is vulnerable to Reflected XSS in the /index.php endpoint. An attacker can prepare an URL that, when opened, results in arbitrary JavaScript execution in the victim's browser, allowing e.g session cookie theft. This issue has been fixed in version 2.5.

CWE	CWE-79
Vendor	fundacja widzialni
Product	widzialnicms
Published	Nov 9, 2026
Last Updated	Nov 9, 2026

Stay Ahead of the Next One

Get instant alerts for fundacja widzialni widzialnicms

Be the first to know when new unknown vulnerabilities affecting fundacja widzialni widzialnicms are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Fundacja Widzialni / WidzialniCMS

0 < 2.5

References

NVD ↗ CVE.org ↗ EPSS Data ↗

cert.pl: https://cert.pl/posts/2026/11/CVE-2026-110468 widzialni.org: https://widzialni.org/funkcjonalnosci-widzialni-cms,sd,mg,0,175

Credits

Mikołaj Matuszewski (CERT.PL)