XSS in Navigate Cms
CVE-2026-3317
Reflected Cross-Site Scripting (XSS) vulnerability in Navigate Content Management System. The vulnerability is present in the '/blog' endpoint because user input is not properly sanitized through designed query parameters. This results in…
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.003 (53.2th percentile) — read the EPSS interpretation.
Affected products
- Navigate Cms — versions 0, 2.9.6
Weakness classification (CWE)
References
- cve-coordination@incibe.es (patch)