What is GHSA-3562-3cj9-6p2p?

GHSA-3562-3cj9-6p2p is a security advisory published by GitHub Security Advisories with Medium severity. WidzialniCMS is vulnerable to Reflected XSS in the /index.php endpoint. An attacker can prepare...

Which CVE IDs does GHSA-3562-3cj9-6p2p cover?

GHSA-3562-3cj9-6p2p covers the following CVE IDs: CVE-2026-112204. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-3562-3cj9-6p2pMedium

WidzialniCMS is vulnerable to Reflected XSS in the /index.php endpoint. An attacker can prepare...

Vendor

GitHub Security Advisories

Published

November 9, 2026

Last Modified

November 9, 2026

🔗 CVE IDs covered (1)

CVE-2026-112204 →

📋 Description

WidzialniCMS is vulnerable to Reflected XSS in the /index.php endpoint. An attacker can prepare an URL that, when opened, results in arbitrary JavaScript execution in the victim's browser, allowing e.g session cookie theft.

This issue has been fixed in version 2.5.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-112204
https://cert.pl/posts/2026/11/CVE-2026-110468
https://widzialni.org/funkcjonalnosci-widzialni-cms,sd,mg,0,175
https://github.com/advisories/GHSA-3562-3cj9-6p2p