CVE-2026-109160

A vulnerability exists in PublicCMS versions up to 5.202608.a within the pay Endpoint . Specifically, the function SafeConfigComponent.getSafeUrl in the file publiccms-core/src/main/java/com/publiccms/logic/component/config/SafeConfigComponent.java is susceptible to manipulation of the returnUrl ...