CVE-2026-52307

Published: Sep 8, 2026Modified: Sep 9, 2026Deferred

Description

An authenticated stored cross-site scripting (XSS) vulnerability in the Column Management component of ClassCMS 1CMS v5.6 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the title field.

References (3)

http://classcms.com

Source: cve@mitre.org

https://github.com/linan-OO/CVE-2026-52307

Source: cve@mitre.org

http://seclists.org/fulldisclosure/2026/Sep/31

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.