vincent-peugnet wcms

• CVE-2026-105124 Medium 6.1 W (wcms) through 3.18.0 Unauthenticated Stored XSS via Login Username and Comments 0.2%
• CVE-2026-105123 High 8.8 W (wcms) through 3.18.0 RCE and Arbitrary File Write via Media Upload API 0.5%