Security Advisory

CVE-2026-6953

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-06-30 08:53:59

Last updated 2026-06-30 12:34:57

Assigner INCIBE

CVSS score 5.1

State PUBLISHED

Description

HTML injection vulnerability in Intermark IT's WebControl CMS v3.5. This vulnerability allows an attacker to send an email containing malicious HTML code to a victim via the contact form. To exploit this vulnerability, the attacker must send a request using the 'nombreApellidos', 'dirección ', and 'comentarios ' parameters to '/processContact.do'.

← Browse all CVEs View on cve.org ↗