CVE-2026-39275 | Cockpit CMS up to 2.13.5 item.php/field-select.js/tags.js item.php cross site scripting

August 26, 2026 Yanac

A vulnerability classified as problematic has been found in Cockpit CMS up to 2.13.5. Affected by this vulnerability is an unknown functionality of the file item.php of the component item.php/field-select.js/tags.js. This manipulation causes cross site scripting.

The identification of this vulnerability is CVE-2026-39275. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More