CVE-2026-51565 | CyberRota

CyberRota Analysis

AI-Generated

A cross-site scripting (XSS) vulnerability exists in the DocsController.php of Milk admin versions up to 0.9.8, allowing remote attackers to inject malicious web scripts or HTML through a crafted request's action parameter. This could lead to unauthorized actions or data exposure for users interacting with the affected application. Organizations using this version of Milk admin should prioritize patching to mitigate potential exploitation risks.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links

github.com ↗ github.com ↗ github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE

CVE-2026-51565

Severity

MEDIUM

CVSS

6.1

EPSS

0.28%

Original NVD Description

Cross-site scripting (XSS) vulnerability in Modules/Docs/DocsController.php in Milk admin <=0.9.8 allows remote attackers to inject arbitrary web script or HTML via the action parameter in a crafted request