Question 1

What is CVE-2026-14449 — CVE-2026-14449?

Accepted Answer

u5CMS through v12.8.8 is vulnerable to reflected XSS via the ‘thanks’ parameter in multiple form components

Question 2

What is the authoritative source for CVE-2026-14449?

Accepted Answer

CVE-2026-14449 (CVE-2026-14449) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

EPSS	0.44% probability of exploitation · percentile 35.7% · 2026-10-05T12:00:23Z
Last modified	2026-07-02

CVE-2026-14449CVE-2026-14449

Description