CVE-2026-112204

Vendor

Fundacja Widzialni

Product

WidzialniCMS

CVSS v4.0

5.1 AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness

CWE-79

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 30
   Advisory CERT Polska 6h ago

   Vulnerabilities in WidzialniCMS software

   CERT Polska coordinated disclosure of 4 vulnerabilities (CVE-2026-110468, CVE-2026-110469, CVE-2026-112204 and CVE-2026-112205) found in WidzialniCMS software.

   CVE-2026-110468CVE-2026-110469CVE-2026-112204+1 more
2. 23
   CVE NVD 4h ago

   WidzialniCMS is vulnerable to Reflected XSS in the /index.php endpoint.

   WidzialniCMS is vulnerable to Reflected XSS in the /index.php endpoint. An attacker can prepare an URL that, when opened, results in arbitrary JavaScript execution in the victim's browser, allowing e.g session cookie theft. This…

   CVSS 5.1 Fix available CVE-2026-112204 Fundacja Widzialni