NVD Vulnerability Detail
Search Exploit, PoC
CVE-2026-3317
Summary

Reflected Cross-Site Scripting (XSS) vulnerability in Navigate Content Management System. The vulnerability is present in the '/blog' endpoint because user input is not properly sanitized through designed query parameters. This results in unsafe HTML rendering, which could allow a remote attacker to execute JavaScript code in the victim's browser.

Publication Date April 21, 2026, 7:16 p.m.
Registration Date April 25, 2026, 4:03 a.m.
Last Update April 22, 2026, 1:20 a.m.
Related information, measures and tools
Common Vulnerabilities List