CVE-2026-11772

DRIMO CMS is affected by a Reflected XSS in the searching functionality, triggered via the q parameter. The vulnerability allows arbitrary JavaScript execution in the victim’s browser when a crafted URL is opened. The affected software is at end-of-life and no security updates are planned. Mitiga...

CVE-2026-11772

creationtimestamp| type| source ---|---|--- 2026-06-23 04:55:00+00:00| seen| https://cert.pl/en/posts/2026/06/CVE-2026-11772 2026-06-23 16:06:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxrs3s44b2q...