idcCMS V1.60 is vulnerable to reflected cross-site scripting (XSS) via the idName parameter in read.php. Unsanitized user input is reflected in the response, allowing arbitrary JavaScript execution.
id: CVE-2024-11587
info:
name: idcCMS V1.60 - Cross-Site Scripting
author: ritikchaddha
sever
...