XSS in Givanz Vvveb
CVE-2026-45622
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.3, there is an unauthenticated reflected cross-site scripting (XSS) issue in the public product return form in Vvveb CMS…
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.001 (19.5th percentile) — read the EPSS interpretation.
Affected products
- Givanz Vvveb — versions < 1.0.8.3
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM)