What is GHSA-g2xm-rcg4-g8gc?

GHSA-g2xm-rcg4-g8gc is a security advisory published by GitHub Security Advisories with Low severity. A flaw has been found in SEMCMS up to 4.2. Affected by this issue is some unknown functionality...

Which CVE IDs does GHSA-g2xm-rcg4-g8gc cover?

GHSA-g2xm-rcg4-g8gc covers the following CVE IDs: CVE-2026-96739. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-g2xm-rcg4-g8gc?

GHSA-g2xm-rcg4-g8gc has a CVSS v3 base score of 4.3, published by GitHub Security Advisories.

GHSA-g2xm-rcg4-g8gcLowCVSS 4.3

A flaw has been found in SEMCMS up to 4.2. Affected by this issue is some unknown functionality...

Vendor

GitHub Security Advisories

Published

September 24, 2026

Last Modified

September 24, 2026

🔗 CVE IDs covered (1)

CVE-2026-96739 →

📋 Description

A flaw has been found in SEMCMS up to 4.2. Affected by this issue is some unknown functionality of the file /Edit/php/upload_json.php of the component KindEditor Upload Interface. This manipulation of the argument imgFile causes cross site scripting. The attack may be initiated remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

🔗 References (7)

https://nvd.nist.gov/vuln/detail/CVE-2026-96739
https://github.com/CSDVi/cve/issues/7
https://vuldb.com/cve/CVE-2026-96739
https://vuldb.com/submit/904124
https://vuldb.com/vuln/409004
https://vuldb.com/vuln/409004/cti
https://github.com/advisories/GHSA-g2xm-rcg4-g8gc