CVE-2010-4877
OneCMS 2.6.1 - XSS
Title source: llmDescription
Cross-site scripting (XSS) vulnerability in index.php in OneCMS 2.6.1 allows remote attackers to inject arbitrary web script or HTML via the view parameter.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by anT!-Tr0J4n · textwebappsphp
https://www.exploit-db.com/exploits/34563
Scores
EPSS
0.0131
EPSS Percentile
79.6%
Classification
CWE
CWE-79
Status
published
Affected Products (2)
insanevisions/onecms
n/a/n/a
Timeline
Published
Oct 07, 2011
Tracked Since
Feb 18, 2026