Cross-Site Scripting Vulnerability in Polen Media Website Template
CVE-2026-8308

6.1MEDIUM

Key Information:

Vendor

Polen Media Software And Information Services

Status
Website Template
Vendor
CVE Published:
24 July 2026

What is CVE-2026-8308?

An improper neutralization of input during the generation of web pages has been identified in the Polen Media Website Template. This vulnerability enables an attacker to embed malicious scripts, resulting in reflected cross-site scripting (XSS) attacks. The affected versions, specifically those prior to v2, allow unauthorized access to user sessions and can potentially compromise sensitive user data. Implementing security measures and updating to the latest version is highly recommended to mitigate the risk associated with this vulnerability.

Affected Version(s)

Website Template 0

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...
government-resource

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.