CVE-2026-88746

idccms V1.70 is vulnerable to Cross Site Scripting (XSS) in /admin/makeDiy_deal.php.

  • Published Sep 21, 2026
  • CVSS 7.1 high
  • 0.3% chance of exploitation in the next 30 days (EPSS)

CVE-2026-88746 at the National Vulnerability Database