CVE-2026-7190

A cross-site scripting XSS vulnerability in the ICTBroadcast software, which affects the demo environment. The vulnerability is found in the ‘login.php’ endpoint, where the ‘editFormextensionusername’ parameter is reflected in the response without proper filtering. Successful exploitation of this...

CVE-2026-7190 Reflected Cross-Site Scripting in ICT Innovations’ PHP-CGI/PHP-FPM configuration

A cross-site scripting XSS vulnerability in the ICTBroadcast software, which affects the demo environment. The vulnerability is found in the ‘login.php’ endpoint, where the ‘editFormextensionusername’ parameter is reflected in the response without proper filtering. Successful exploitation of this...

EUVD-2026-112678

A cross-site scripting XSS vulnerability in the ICTBroadcast software, which affects the demo environment. The vulnerability is found in the ‘login.php’ endpoint, where the ‘editFormextensionusername’ parameter is reflected in the response without proper filtering. Successful exploitation of this...

CVE-2026-7190

The ICTBroadcast software contains a reflected cross-site scripting (XSS) vulnerability affecting its demo environment. The flaw exists in the login.php endpoint, where the editForm[extension_username] parameter is reflected in the server response without adequate filtering. An attacker could exp...