CVE-2026-14449

Description

u5CMS through v12.8.8 is vulnerable to reflected XSS via the ‘thanks’ parameter in multiple form components

References

• https://github.com/u5cms/u5cms/releases/tag/v12.8.9