CVE-2026-37710 | CyberRota

CyberRota Analysis

AI-Generated

A Cross Site Scripting vulnerability in Omeka S version 4.2.0 allows remote attackers to execute arbitrary code through the site navigation custom URL function. This could lead to unauthorized actions or data exposure for users interacting with the affected site. Organizations using this version of Omeka S should prioritize patching to mitigate potential exploitation risks.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links

github.com ↗ github.com ↗ github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE

CVE-2026-37710

Severity

MEDIUM

CVSS

6.1

EPSS

0.36%

Original NVD Description

Cross Site Scripting vulnerability in Omeka S v.4.2.0 allows a remote attacker to execute arbitrary code via the site navigation custom URL function