XSS in Navigate Cms

CVE-2026-3317

Reflected Cross-Site Scripting (XSS) vulnerability in Navigate Content Management System. The vulnerability is present in the '/blog' endpoint because user input is not properly sanitized through designed query parameters. This results in…

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.003 (53.2th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References