Skip to content

Product

Intermark IT WebControl CMS vulnerabilities

2 published CVES affecting Intermark IT WebControl CMS, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
0
Medium
2
Low
0
Unscored
0
CISA KEV
0

Latest Intermark IT WebControl CMS CVEs

Newest publication first

  1. CVE-2026-6954 Multiple vulnerabilities in Intermark IT's WebControl CMS

    Published
    MediumCVSS 5.1

    Cross-Site Scripting (XSS) vulnerability in Intermark IT's WebControl CMS v3.5. This vulnerability allows an attacker to execute JavaScript code or inject a dynamic iframe into the victim’s browser by sending a malicious URL via the 'urlDestino' parameter in '/portal.do'. This vu...

  2. CVE-2026-6953 Multiple vulnerabilities in Intermark IT's WebControl CMS

    Published
    MediumCVSS 5.1

    HTML injection vulnerability in Intermark IT's WebControl CMS v3.5. This vulnerability allows an attacker to send an email containing malicious HTML code to a victim via the contact form. To exploit this vulnerability, the attacker must send a request using the 'nombreApellidos',...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.