Intermark IT vulnerabilities
Published CVEs affecting Intermark IT products: 2 record(s), with severity, exploitation and fixes.
CVE-2026-6954
Medium · 5.1
CWE-79 Jun 30, 2026
Multiple vulnerabilities in Intermark IT's WebControl CMS
Cross-Site Scripting (XSS) vulnerability in Intermark IT's WebControl CMS v3.5. This vulnerability allows an attacker to execute JavaScript code or inject a dynamic iframe into the victim’s browser by sending a malicious URL via the 'urlDestino' parameter in '/portal.do'. This vulnerability can be exploited to steal sensitive user data, such as session cookies, display phishing interfaces, or perform actions on the user’s behalf.
CVE-2026-6953
Medium · 5.1
CWE-79 Jun 30, 2026
Multiple vulnerabilities in Intermark IT's WebControl CMS
HTML injection vulnerability in Intermark IT's WebControl CMS v3.5. This vulnerability allows an attacker to send an email containing malicious HTML code to a victim via the contact form. To exploit this vulnerability, the attacker must send a request using the 'nombreApellidos', 'dirección ', and 'comentarios ' parameters to '/processContact.do'.