Advisories · Technology

idcCMS.

Every CVE that names idcCMS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-108815 CVE record

CVSS 5.1 Medium

idcCMS member_deal.php cross site scripting
- idcCMS
- Cross-site scripting (XSS)
- Code injection
Not analysed yet 12 Oct 2026
CVE-2024-11587 CVE record

CVSS 5.3 Medium

idcCMS classProvCity.php GetCityOptionJs cross site scripting
- idcCMS
- Cross-site scripting (XSS)
- Code injection
Not analysed yet 21 Nov 2024
CVE-2024-4172 CVE record

CVSS 4.3 Medium

idcCMS cross-site request forgery
- idcCMS
- Cross-site request forgery (CSRF)
Not analysed yet 25 Apr 2024