CVE-2026-36521

MediumCVSS 6.1

Published: 15/06/2026(UTC)Updated: 16/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.15%

4th percentile — higher than 4% of all known CVEs

PublicCMS V5.202506.d has a Cross Site Scripting (XSS) vulnerability in the site configuration management module.

Exploitation of this vulnerability may lead to session hijacking and data theft.

It is recommended to update to the latest version of PublicCMS to mitigate this vulnerability.

Original NVD description (English source)

PublicCMS V5.202506.d has a Cross Site Scripting (XSS) vulnerability in the site configuration management module.