{"id":"CVE-2026-88746","published":"2026-09-21T21:17:15.893","lastModified":"2026-09-22T20:00:03.713","description":"idccms V1.70 is vulnerable to Cross Site Scripting (XSS) in /admin/makeDiy_deal.php.","cvssScore":7.1,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","cwes":["CWE-79"],"vendors":[],"products":[],"references":[{"url":"https://github.com/ants01/idccms-V1.70-is-vulnerable-to-XSS","tags":[]}],"exploitRefs":[{"url":"https://github.com/ants01/idccms-V1.70-is-vulnerable-to-XSS","tags":[]}],"hasPoc":true,"ai":null}