CVE-2026-46496

CVE-2026-46496

HAX CMS helps manage microsite universe with PHP or NodeJs backends. A stored cross-site scripting (XSS) vulnerability exists in versions prior to 26.0.0 due to improper sanitization of the `<video-player>` component. The component allows…

Vulnerability class: XSS (Cross-Site Scripting)

Weakness classification (CWE)

References