CVE-2026-110113

PublicCMS versions through V6.202608.a are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability within the TradeAddressController tradeAddress/save handler. The root cause is a failure to verify ownership by the session user and site, allowing authenticated members to modify oth...