idccms V1.70 is vulnerable to Cross Site Scripting (XSS) in /admin/makeDiy_deal.php.

High CVSS 7.1

CVECVE-2026-88746

First seen2026-09-22 15:17 UTC

Disclosed2026-09-21 21:17 UTC

Last updated2026-09-22 15:17 UTC

Channel statusauto

Summary

idccms V1.70 is vulnerable to Cross Site Scripting (XSS) in /admin/makeDiy_deal.php.

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).