CVE-2026-5806

🗓️ 08 Apr 2026 21:15:17Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 1 Views🌐 WEB

CVE-2026-5806 in Code Projects Easy Blog Site 1.0 enables cross site scripting via update.php postTitle.

Reporter	Title	Published	Views	Family All 7
ATTACKERKB	CVE-2026-5806	8 Apr 202621:15	–	attackerkb
CNNVD	Code-Projects Easy Blog Site 代码注入漏洞	8 Apr 202600:00	–	cnnvd
Cvelist	CVE-2026-5806 code-projects Easy Blog Site update.php cross site scripting	8 Apr 202621:15	–	cvelist
EUVD	EUVD-2026-20649	9 Apr 202600:31	–	euvd
NVD	CVE-2026-5806	8 Apr 202622:16	–	nvd
Positive Technologies	PT-2026-31474	8 Apr 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-5806	10 Apr 202601:22	–	redhatcve

Vulners

Node

code-projects easy_blog_siteMatch1.0

[
  {
    "vendor": "code-projects",
    "product": "Easy Blog Site",
    "versions": [
      {
        "version": "1.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/submit/787045
github	www.github.com/ahmadmarz10-hub/CVEsMarz/blob/main/Stored%20Cross-Site%20Scripting%20(XSS)%20in%20Easy%20Blog%20Site%20PHP%20postTitle%20Parameter.md
code-projects	www.code-projects.org/
vuldb	www.vuldb.com/vuln/356244/cti
vuldb	www.vuldb.com/vuln/356244

Parameter	Position	Path	Description	CWE
postTitle	request body	/posts/update.php	Cross-site scripting via manipulation of the postTitle parameter in update.php	CWE-79, CWE-94

29 Apr 2026 01:00Current

4.2Medium risk

Vulners AI Score4.2

CVSS 3.13.5

CVSS 24

CVSS 45.1

CVSS 33.5

EPSS0.00036