CVE-2026-3317 in NavigateИнформация

Сводка

по MITRE • 21.04.2026

Reflected Cross-Site Scripting (XSS) vulnerability in Navigate Content Management System. The vulnerability is present in the '/blog' endpoint because user input is not properly sanitized through designed query parameters. This results in unsafe HTML rendering, which could allow a remote attacker to execute JavaScript code in the victim's browser.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Ответственный

INCIBE

Резервировать

27.02.2026

Раскрытие

21.04.2026

Модерация

принято

Вход

VDB-358433

EPSS

0.00296

KEV

Нет

Деятельности

Очень низкий

Источники

Want to know what is going to be exploited?

We predict KEV entries!