Question 1

What is CVE-2026-14449 — CVE-2026-14449?

Accepted Answer

u5CMS through v12.8.8 is vulnerable to reflected XSS via the ‘thanks’ parameter in multiple form components

Question 2

What is the authoritative source for CVE-2026-14449?

Accepted Answer

CVE-2026-14449 (CVE-2026-14449) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

EPSS	0.27% probability of exploitation · percentile 19.2% · 2026-08-16T12:03:43Z
Last modified	2026-07-02

CVE-2026-14449CVE-2026-14449

Description