CVE-2026-27176
MajorDoMo (aka Major Domestic Module) contains a reflected cross-site scripting (XSS) vulnerability in command.php. The $qry parameter is rendered directly into the HTML page without sanitization via htmlspecialchars(), both in an input field value attribute and in a paragraph element. An attacker can inject arbitrary JavaScript by crafting a URL with malicious content in the qry parameter.
Vendor
Product
CWE
Yayın Tarihi
2026-02-18 22:16:25
Güncelleme
2026-02-20 20:01:03
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-