Is CVE-2026-66146 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-66146?

CVE-2026-66146 has a CVSS v3 severity of MEDIUM (6.1).

Back

CVE-2026-66146

Description

Multiple Cross-Site Scripting (XSS) vulnerabilities were identified in GMS 9.5.1 (Build 9510.1044) and earlier versions that allow a remote attacker to execute javascript script in a user's browser.