CVE-2026-88746

idccms V1.70 is vulnerable to Cross Site Scripting XSS in /admin/makeDiydeal.php...

CVE-2026-88746

idccms V1.70 is affected by a Cross Site Scripting (XSS) vulnerability located in the /admin/makeDiy_deal.php file. The vulnerability exists in the admin panel area, meaning successful exploitation would require access to the admin section. The exact root cause and specific injection point within...