CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.1. It may be remotely exploitable.
CVE
CVE-2026-30661
Severity
MEDIUM
CVSS
6.1
EPSS
0.21%
Original NVD Description
iCMS v8.0.0 contains a Cross-Site Scripting (XSS) vulnerability in the User Management component, specifically within the index.html file. This allows remote attackers to execute arbitrary web script or HTML via the regip or loginip parameters.
Related CVEs
Other vulnerabilities affecting the same vendor(s)