CVE-2026-30661: XSS
Published Mar 24, 2026
·Updated
iCMS v8.0.0 contains a Cross-Site Scripting (XSS) vulnerability in the User Management component, specifically within the index.html file. This allows remote attackers to execute arbitrary web script or HTML via the regip or loginip parameters.
Affected Software
2 affected components
iCMS iCMS=8.0.0
idreamsoft iCMS=8.0.0
Event History
Mar 24, 2026
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·03:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-30661?
CVE-2026-30661 is categorized as a high severity Cross-Site Scripting (XSS) vulnerability.
2
How do I fix CVE-2026-30661?
To fix CVE-2026-30661, validate and sanitize the input parameters regip and loginip in the User Management component.
3
What components of iCMS are affected by CVE-2026-30661?
CVE-2026-30661 affects the User Management component, specifically the index.html file in iCMS v8.0.0.
4
Can CVE-2026-30661 be exploited remotely?
Yes, CVE-2026-30661 can be exploited remotely by attackers to execute arbitrary web scripts.
5
What version of iCMS is impacted by CVE-2026-30661?
Only iCMS version 8.0.0 is impacted by CVE-2026-30661.