MEDIUM
funadmin Backend index.html cross site scripting
Published Feb 22, 2026
4.8
MEDIUMCVSS 4.0
EPSS 0.37%
Description
A security vulnerability has been detected in funadmin up to 7.1.0-rc4. This vulnerability affects unknown code of the file app/backend/view/index/index.html of the component Backend Interface. The manipulation of the argument Value leads to cross site scripting. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected products
-
Affected
- 7.1.0-rc1
- 7.1.0-rc2
- 7.1.0-rc3
- 7.1.0-rc4
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (2)
References (8)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-7539 Advisory
- https://github.com/I4m6da/CVE/issues/4 issue-trackingExploitIssue Tracking
- https://github.com/I4m6da/CVE/issues/4#issue-3890421022 exploitissue-trackingIssue Tracking
- https://github.com/advisories/GHSA-rfh7-7v27-6p9r Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-2897
- https://vuldb.com/?ctiid.347208 signaturepermissions-requiredPermissions RequiredVDB Entry
- https://vuldb.com/?id.347208 vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
- https://vuldb.com/?submit.753975 third-party-advisoryThird Party AdvisoryVDB Entry
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-7539 | Advisory | |
| https://github.com/I4m6da/CVE/issues/4 | issue-trackingExploitIssue Tracking | |
| https://github.com/I4m6da/CVE/issues/4#issue-3890421022 | exploitissue-trackingIssue Tracking | |
| https://github.com/advisories/GHSA-rfh7-7v27-6p9r | Advisory | |
| https://nvd.nist.gov/vuln/detail/CVE-2026-2897 | ||
| https://vuldb.com/?ctiid.347208 | signaturepermissions-requiredPermissions RequiredVDB Entry | |
| https://vuldb.com/?id.347208 | vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry | |
| https://vuldb.com/?submit.753975 | third-party-advisoryThird Party AdvisoryVDB Entry |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner VulDB
Published Feb 22, 2026
Updated Feb 23, 2026
Reserved Feb 20, 2026
Link CVE-2026-2897
CISA Vulnrichment
Updated Feb 23, 2026
Red Hat
No data
GitHub
Link GHSA-RFH7-7V27-6P9R