Cross Site Scripting vulnerability in fuint Member Marketing System <=v1.0 allows a remote attacker to execute arbitrary code via the ClientMessageController.java file

Info

CVECVE-2026-51025

First seen2026-07-21 00:15 UTC

Disclosed2026-07-20 22:17 UTC

Last updated2026-07-21 00:15 UTC

Channel statusauto

Summary

Cross Site Scripting vulnerability in fuint Member Marketing System <=v1.0 allows a remote attacker to execute arbitrary code via the ClientMessageController.java file

In-depth triage · Auto channel

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Sources

NVD DATABASE

Original Links

https://github.com/W000i/vuln/issues/4

Timeline

2026-07-21 nvd_ingest NVD