Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A reflected cross-site scripting (XSS) vulnerability in the /admin/menus component of Lightcms v2.0 allows attackers to execute arbitrary Javascript in the context of the user's browser via modifying the referer value in the request header.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2026-29934 A reflected cross-site scripting (XSS) vulnerability in the /admin/menus component of Lightcms v2.0 allows attackers to execute arbitrary Javascript in the context of… https://www.cve.org/CVERecord?id=CVE-2026-29934
Post summary
The snippet announces a reflected XSS vulnerability in Lightcms v2.0, providing details on the vulnerable component and potential impact.
🚨*CVE* CVE-2026-29934 A reflected cross-site scripting (XSS) vulnerability in the /admin/menus component of Lightcms v2.0 allows attackers to execute arbitrary Javascript in the context of… https://www.cve.org/CVERecord?id=CVE-2026-29934 ----- Traducción: CVE-2026-29934 Una… http://infoflow.cloud`
Post summary
The post announces CVE‑2026‑29934, a reflected XSS flaw in Lightcms v2.0, and links to its CVE record, but offers no PoC, exploit code, or patch information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | lightcms_project | lightcms | 2.0 | - | - |