medium6.4
CVE-2026-14449
u5CMS through v12.8.8 is vulnerable to reflected XSS via the ‘thanks’ parameter in multiple form components
Impact
u5CMS through v12.8.8 is vulnerable to reflected XSS via the ‘thanks’ parameter in multiple form components
Affected products
| Product | Affected versions |
|---|---|
| U5CMS | through 12.8.8 |
Versions were read from the advisory text. No structured product data has been published for this record yet.