Description

A vulnerability has been found in idcCMS 1.70. Affected is an unknown function of the file admin/member_deal.php. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Related CPE's

Could not find any relations

References

https://github.com/ants01/idccmsV1.70_An-XSS_vulnerability_exists

https://vuldb.com/cve/CVE-2026-108815

https://vuldb.com/submit/964056

https://vuldb.com/vuln/416592

https://vuldb.com/vuln/416592/cti

Weaknesses

[email protected]

Primary
CWE-79CWE-94

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

3.5 · Low

Information

Source identifier

[email protected]

Vulnerability status

Deferred

Published

2026-10-12T09:16:42.847Z

1 hour ago

Last modified

2026-10-12T09:16:42.993Z

1 hour ago