CVE-2026-6953CWE-79

Multiple vulnerabilities in Intermark IT's WebControl CMS

Medium · published June 30, 2026

CVSS v4.0
5.1
EPSS
0%
Percentile
37.5
In the wild
Unconfirmed
What it is

HTML injection vulnerability in Intermark IT's WebControl CMS v3.5. This vulnerability allows an attacker to send an email containing malicious HTML code to a victim via the contact form. To exploit this vulnerability, the attacker must send a request using the 'nombreApellidos', 'dirección ', and 'comentarios ' parameters to '/processContact.do'.

The record
Technical detail
CVSS v4.0
5.1 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N
EPSS
0.00444 · 37.5th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2026-06-30T08:53Z
EPSS history
Timeline
  • 30 JUN 08:53Z
    Multiple vulnerabilities in Intermark IT's WebControl CMS
    cvelistv5