CoreCVE
Back

MEDIUM

Multiple vulnerabilities in Intermark IT's WebControl CMS

Published Jun 30, 2026

Description

HTML injection vulnerability in Intermark IT's WebControl CMS v3.5. This vulnerability allows an attacker to send an email containing malicious HTML code to a victim via the contact form. To exploit this vulnerability, the attacker must send a request using the 'nombreApellidos', 'dirección ', and 'comentarios ' parameters to '/processContact.do'.

Affected products

Remediation

Vendor solution

No solution has been reported at this time.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner INCIBE
Published Jun 30, 2026
Updated Jun 30, 2026
Reserved Apr 24, 2026
Link CVE-2026-6953
CISA Vulnrichment
Updated Jun 30, 2026
NVD
Status Deferred
Modified Jun 30, 2026
Link CVE-2026-6953
Red Hat
Severity n/a
Public date n/a
Links CVE-2026-6953
ENISA EUVD
Assigner n/a
Published n/a
Updated n/a
Exploited since n/a
Link n/a