Is CVE-2026-108815 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-108815?

CVE-2026-108815 has a CVSS v3 severity of LOW (3.5).

Back

CVE-2026-108815

Description

A vulnerability has been found in idcCMS 1.70. Affected is an unknown function of the file admin/member_deal.php. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.