CyberRota
Back to database

CVE-2026-3317

UNKNOWN · CVSS N/A EPSS 0.27%

Source: NVD + CISA KEV + EPSS · Published: 2026-04-21 · Last synced: 2026-05-18

CyberRota Analysis

Uzaktan istismar edilebilir olabilir.

CVE
CVE-2026-3317
Severity
UNKNOWN
CVSS
N/A
EPSS
0.27%
Java

Original NVD Description

Reflected Cross-Site Scripting (XSS) vulnerability in Navigate Content Management System. The vulnerability is present in the '/blog' endpoint because user input is not properly sanitized through designed query parameters. This results in unsafe HTML rendering, which could allow a remote attacker to execute JavaScript code in the victim's browser.