CVE-2026-45616 MEDIUM

CVE-2026-45616: Vvveb: Stored XSS in Posts allows privilege escalation via post editor

Vendor Givanz
Product Vvveb
Weakness CWE-79 · XSS
Published May 15, 2026
Last update May 15, 2026
View on NVD All CVEs

CVSS base score

5.1/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction —
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N

What the vulnerability does

01Description

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.3, This vulnerability is fixed in 1.0.8.3.

Key dates

02Disclosure timeline

May 15, 2026 CVE published
May 15, 2026 Record updated