MediumCVSS 6.4
EPSS 0.44%
u5CMS through v12.8.8 is vulnerable to reflected XSS via the ‘thanks’ parameter in multiple form components
Vendor
1 published CVE affecting u5CMS, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
Newest publication first
u5CMS through v12.8.8 is vulnerable to reflected XSS via the ‘thanks’ parameter in multiple form components
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.