CVE-2026-108834 | Cairo-dock Glx-Dock up to 3.4.0 Query Parameter ww_page.php cross site scripting

October 11, 2026 Yanac

A vulnerability identified as problematic has been detected in Cairo-dock Glx-Dock up to 3.4.0. This issue affects some unknown processing of the file ww_page.php of the component Query Parameter Handler. Performing a manipulation of the argument p results in cross site scripting.

This vulnerability is reported as CVE-2026-108834. The attack is possible to be carried out remotely. Moreover, an exploit is present.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More