Executive Summary

CVE-2026-11772 is a Reflected Cross-Site Scripting (XSS) vulnerability in the DRIMO CMS software. It occurs via the 'q' parameter in the search functionality. An attacker can craft a specially prepared URL that, when opened by a victim, causes arbitrary JavaScript code to execute in the victim's browser.

The product is no longer supported and will not receive updates, but deleting the info.php file can mitigate this vulnerability.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability allows an attacker to execute arbitrary JavaScript code in the browser of anyone who opens the maliciously crafted URL. This can lead to theft of sensitive information such as cookies, session tokens, or other private data accessible via the browser.

It can also enable attackers to perform actions on behalf of the victim, manipulate the website content, or redirect users to malicious sites.

Useful 0 Not Useful 0

Detection Guidance

The vulnerability is a Reflected Cross-Site Scripting (XSS) in the 'q' parameter of the search functionality in DRIMO CMS. Detection involves checking if the application improperly reflects input from the 'q' parameter back to the browser without proper sanitization.

One way to detect this is to manually test the search functionality by sending specially crafted URLs containing JavaScript payloads in the 'q' parameter and observing if the script executes in the browser.

Example command using curl to test the vulnerability:

• curl -i "http://[target]/search?q=<script>alert('XSS')</script>"

If the response contains the script tag without proper encoding or escaping, the vulnerability is present.

Useful 0 Not Useful 0

Mitigation Strategies

The product is in End Of Life phase and will not receive any updates or patches.

The recommended immediate mitigation is to delete the info.php file from the DRIMO CMS installation.

This action mitigates the vulnerability by preventing the exploitation vector.

Useful 0 Not Useful 0

Compliance Impact

The vulnerability in DRIMO CMS allows for reflected Cross-Site Scripting (XSS) attacks, which can lead to arbitrary JavaScript execution in a victim's browser. Such vulnerabilities can potentially expose user data or enable unauthorized actions, which may impact compliance with data protection regulations like GDPR or HIPAA that require safeguarding personal and sensitive information.

However, the provided context and resources do not explicitly discuss the impact of this vulnerability on compliance with specific standards or regulations such as GDPR or HIPAA.

Useful 0 Not Useful 0