{"id":"CVE-2026-108815","published":"2026-10-12T09:16:42.847","lastModified":"2026-10-13T15:17:33.427","description":"A vulnerability has been found in idcCMS 1.70. Affected is an unknown function of the file admin/member_deal.php. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.","cvssScore":3.5,"cvssSeverity":"LOW","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","cwes":["CWE-79","CWE-94"],"vendors":[],"products":[],"references":[{"url":"https://github.com/ants01/idccmsV1.70_An-XSS_vulnerability_exists","tags":[]},{"url":"https://vuldb.com/cve/CVE-2026-108815","tags":[]},{"url":"https://vuldb.com/submit/964056","tags":[]},{"url":"https://vuldb.com/vuln/416592","tags":[]},{"url":"https://vuldb.com/vuln/416592/cti","tags":[]}],"exploitRefs":[{"url":"https://github.com/ants01/idccmsV1.70_An-XSS_vulnerability_exists","tags":[]}],"hasPoc":true,"ai":null}