CVE-2026-92381 | PbootCMS up to 3.2.22 Template Rendering ContentController.php decode_string Title cross site scripting (Issue 69)

A vulnerability was found in PbootCMS up to 3.2.22. It has been rated as problematic. This affects the function decode_string of the file apps/admin/controller/content/ContentController.php of the component Template Rendering. This manipulation of the argument Title causes cross site scripting.

This vulnerability is tracked as CVE-2026-92381. The attack is possible to be carried out remotely. Moreover, an exploit is present.

The reported GitHub issue was closed with the reason “completed”.VulDB Recent EntriesRead More