CVE-2026-0587

CVE-2026-0587 affects Xinhu Rainrock RockOA up to 2.7.1. The vulnerability is a cross-site scripting in the Cover Image Handler, file rock_page_gong.php, via tampering of the fengmian parameter. It can be exploited remotely; the public exploit is available and the vendor did not respond. Remediat...