CVE-2026-41877 | R-SOFT SERWIS DMS up to 3.19-2831 File Upload Name cross site scripting

July 10, 2026 Yanac

A vulnerability labeled as problematic has been found in R-SOFT SERWIS DMS up to 3.19-2831. Affected is an unknown function of the component File Upload. Executing a manipulation of the argument Name can lead to cross site scripting.

The identification of this vulnerability is CVE-2026-41877. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More