Full Report
Reflected Cross-site Scripting vulnerability (CVE-2026-11772) has been found in DRIMO CMS software.
Analysis Summary
# Vulnerability: Reflected Cross-Site Scripting (XSS) in DRIMO CMS
## CVE Details
- **CVE ID**: CVE-2026-11772
- **CVSS Score**: Not explicitly provided in the source (Typically 6.1 Medium for Reflected XSS)
- **CWE**: CWE-79 (Improper Neutralization of Input During Web Page Generation)
## Affected Systems
- **Products**: DRIMO CMS
- **Versions**: All versions through 1.0
- **Configurations**: Default installations containing the search functionality or the `info.php` file.
## Vulnerability Description
A Reflected Cross-site Scripting (XSS) vulnerability exists in the DRIMO CMS search functionality. The application fails to properly neutralize user-supplied input provided via the `q` parameter. This allows an attacker to inject and execute malicious JavaScript in the context of the user's browser session.
## Exploitation
- **Status**: PoC available (Attacker-crafted URLs)
- **Complexity**: Low
- **Attack Vector**: Network
## Impact
- **Confidentiality**: Low (Session hijacking, cookie theft)
- **Integrity**: Low (Defacement, unauthorized action execution)
- **Availability**: None
## Remediation
### Patches
- **No patches available**: The product has reached **End of Life (EOL)** status and will not receive security updates.
### Workarounds
- **File Deletion**: Deleting the `info.php` file from the server mitigates the vulnerability according to the vendor/CERT Polska advisory.
## Detection
- **Indicators of Compromise**: Monitor web server logs for suspicious or encoded JavaScript payloads (e.g., `<script>`, `alert(`, `onerror=`) within the `q` query parameter.
- **Detection Methods**: Use web application firewalls (WAF) to detect and block common XSS patterns in GET requests.
## References
- **CERT Polska Advisory**: hxxps[://]cert[.]pl/en/posts/2026/06/vulnerability-in-drimo-cms-software/
- **CVE Record**: hxxps[://]www[.]cve[.]org/CVERecord?id=CVE-2026-11772
- **CWE-79**: hxxps[://]cwe[.]mitre[.]org/data/definitions/79[.]html