CVE-2026-5806
LowCVSS 3.5Exploitation Probability (EPSS)
Low risk15th percentile - higher than 15% of all known CVEs
Summary
A cross-site scripting vulnerability has been detected in code-projects Easy Blog Site 1.0. The issue is in the /posts/update.php file where the postTitle argument is not properly sanitized. The attack can be performed remotely and the exploit has been publicly disclosed.
Risk Assessment
An attacker can inject malicious scripts, potentially leading to user session theft or administrator account takeover.
Recommendation
Immediately update the application to the latest version or apply a security patch against XSS.
Original NVD description (English source)
A security vulnerability has been detected in code-projects Easy Blog Site 1.0. This affects an unknown function of the file /posts/update.php. The manipulation of the argument postTitle leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.