{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "CVE-2026-52307",
          "vendor": "Cve",
          "versions": [
            {
              "status": "affected",
              "version": "unknown"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "\u61d2-\u764c-\u75c7\uff5e via Fulldisclosure"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "CVE-2026-52307: 1CMS v5.6 Authenticated Stored XSS Vulnerability\n\n\nVulnerability Description\nAn authenticated stored cross-site scripting (XSS) vulnerability exists in the Column Management component of ClassCMS \n1CMS v5.6. Attackers can execute arbitrary web scripts or HTML by injecting a crafted payload into the title field.\n\n\n- Vulnerability Type: Cross Site Scripting (XSS)\n- Vendor: ClassCMS\n- Affected Product: 1CMS v5.6\n- Affected Component: Column Management \u2192 Article Edit page\n- Attack Type: Remote\n- Impact: Code Execution (Yes), Information Disclosure (Yes)\n\n\nAttack Vectors\nThe vulnerability is remotely exploitable over the network. An authenticated administrator can inject arbitrary \nJavaScript into the article title field via the Column Management \u2192 Article Edit page. When other users view the \narticle list or detail page containing the malicious title, the injected script executes in their browsers.\n\n\n- Attack complexity: Low\n- Privileges required: Administrator\n\n\nAffected Versions\n1CMS v5.6 (and possibly earlier versions).\n\n\nReproduction Steps\n1. Download and install 1CMS v5.6 on a local environment (PHP 5.2\u20138.4 supported).\n2. Complete the installation and log in as an administrator.\n3. Navigate to the admin dashboard \u2192 Column Management \u2192 Article Edit.\n4. In the title field, inject the following payload:\n\u0026nbsp; \u0026nbsp;\u003cscript\u0026gt;alert(\u0027XSS\u0027)\u003c/script\u0026gt;\n5. Save the article.\n6. View the article list or detail page as any user.\n\n\nExpected Result\nThe injected JavaScript (alert(\u0027XSS\u0027)) executes in the browser of any user viewing the affected page, confirming the \nstored XSS vulnerability.\n\n\nImpact Analysis\n- Arbitrary script execution in the victim\u0027s browser\n- Session hijacking \u2013 attackers can steal session cookies\n- Information disclosure \u2013 sensitive data can be exfiltrated\n- Phishing attacks \u2013 malicious content can be injected\n- Defacement \u2013 the CMS appearance can be altered\n\n\nRemediation\n- Upgrade to the latest version of 1CMS if a patch is available\n- Implement proper input sanitization and output encoding\n- Restrict administrator access to trusted users only\n- Consider using Content Security Policy (CSP) headers\n\n\nCVE ID: CVE-2026-52307\nDiscovered: 2026-09-03\n_______________________________________________\nSent through the Full Disclosure mailing list\nhttps://nmap.org/mailman/listinfo/fulldisclosure\nWeb Archives \u0026 RSS: https://seclists.org/fulldisclosure/"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-09T10:09:49Z",
        "orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
        "shortName": "VULNARCHIVE"
      },
      "references": [
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://vuln.freearchive.org/archive/full-disclosure/2026/Sep/31"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://seclists.org/fulldisclosure/2026/Sep/31"
        },
        {
          "url": "https://nmap.org/mailman/listinfo/fulldisclosure"
        },
        {
          "url": "https://seclists.org/fulldisclosure/"
        }
      ],
      "source": {
        "defect": [
          "https://seclists.org/fulldisclosure/2026/Sep/31"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "CVE-2026-52307: Stored XSS in 1CMS v5.6",
      "x_gcve": [
        {
          "recordType": "reference",
          "relationships": [
            {
              "destId": "CVE-2026-52307",
              "type": "related"
            }
          ],
          "vulnId": "GCVE-1988-2026-0314",
          "x_vulnarchive": {
            "archiveUrl": "https://vuln.freearchive.org/archive/full-disclosure/2026/Sep/31",
            "automated": true,
            "contentSha256": "0a1b0e53b14484b3309ffacfb503cd9d2b86c1e50b71d841cf5513c0138bc7c3",
            "evidenceScore": 7,
            "messageId": "",
            "originalUrl": "https://seclists.org/fulldisclosure/2026/Sep/31",
            "policy": "vulnarchive-1",
            "sourceFormat": "text/html",
            "sourcePublishedAt": "2026-09-06T08:08:23Z"
          }
        },
        {
          "recordType": "advisory",
          "vulnId": "gcve-1988-2026-0314"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
    "assignerShortName": "VULNARCHIVE",
    "datePublished": "2026-09-08T18:48:12Z",
    "dateUpdated": "2026-09-09T10:09:49Z",
    "state": "PUBLISHED",
    "vulnId": "GCVE-1988-2026-0314"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}