Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Reflected Cross-Site Scripting (XSS) vulnerability in Navigate Content Management System. The vulnerability is present in the '/blog' endpoint because user input is not properly sanitized through designed query parameters. This results in unsafe HTML rendering, which could allow a remote attacker to execute JavaScript code in the victim's browser.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
⚠️ #INCIBEaviso | Cross-Site Scripting reflejado en la aplicación de #NavigateCMS #CVE CVE-2026-3317 https://www.incibe.es/incibe-cert/alerta-temprana/avisos/cross-site-scripting-reflejado-en-la-aplicacion-de-navigate-cms #AvisosDeSeguridad #TI #CNA #0day
Post summary
The post announces a new reflected XSS vulnerability in NavigateCMS, identified as CVE-2026-3317, and directs readers to an Incibe alert for details.
CVE-2026-3317 Reflected Cross-Site Scripting (XSS) vulnerability in Navigate Content Management System. The vulnerability is present in the '/blog' endpoint because user input is not… https://www.cve.org/CVERecord?id=CVE-2026-3317
Post summary
The text announces a new Reflected XSS vulnerability (CVE‑2026‑3317) in Navigate CMS, describing its location and cause.