CVE-2026-30919

HIGH

7.6

Descripcion

facileManager is a modular suite of web apps built with the sysadmin in mind. Prior to 6.0.4 , stored XSS (also known as persistent or second-order XSS) occurs when an application receives data from an untrusted source and includes that data in its subsequent HTTP responses in an unsafe manner. This vulnerability was found in the fmDNS module. This vulnerability is fixed in 6.0.4.

Detalles CVE

Puntuacion CVSS v3.17.6

SeveridadHIGH

Vector CVSSCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L

Vector de ataqueNETWORK

ComplejidadLOW

Privilegios requeridosLOW

Interaccion usuarioREQUIRED

Publicado3/10/2026

Ultima modificacion3/13/2026

Fuentenvd

Avistamientos honeypot0

Productos afectados

facilemanager:facilemanager

Debilidades (CWE)

CWE-79

Referencias

https://github.com/facileManager/facileManager/security/advisories/GHSA-2339-h9qw-q6vf(security-advisories@github.com)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.