{"id":"CVE-2026-121929","kind":"vulnerability","aliases":["CVE-2026-121929"],"related":[],"title":"EmpireCMS: spacename parameter in member space page allows cross-site scripting","description":"A security flaw has been discovered in EmpireSoft EmpireCMS up to 8.0. Impacted is an unknown function of the file /e/member/mspace/index.php. The manipulation of the argument spacename results in cross site scripting. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.","summary":"EmpireCMS up to version 8.0 does not properly handle the spacename argument in /e/member/mspace/index.php. An attacker can inject script that runs in a visitor's browser when they open a crafted link.","severity":"medium","cvss":4.0,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["cms","empirecms","package","php"],"not_affected_if":["version-above-8.0"],"how_to_check":"- Check whether the EmpireCMS version in use is 8.0 or lower.\n- Look for the file /e/member/mspace/index.php on the site.","fix":null,"status":"open","published_at":"2026-11-04T19:17:32+00:00","first_seen_at":"2026-11-04T19:28:48+00:00","triaged_at":"2026-11-04T19:30:16+00:00","updated_at":"2026-11-04T19:30:16+00:00","category":"package","confidence":0.6,"triage":{"at":"2026-11-04T19:30:16Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"internet","title":"EmpireCMS: spacename parameter in member space page allows cross-site scripting","impact":"medium","summary":"EmpireCMS up to version 8.0 does not properly handle the spacename argument in /e/member/mspace/index.php. An attacker can inject script that runs in a visitor's browser when they open a crafted link.","audience":"businesses","category":"package","nicknames":[],"who_cares":["empirecms","php","cms"],"confidence":0.6,"fix_status":"unknown","needs_auth":"unknown","worst_case":"attacker script runs in visitors' browsers, session data exposed","analyst_note":"Confirm the affected versions, whether login is required to reach the mspace page, and whether a vendor or patch exists; the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-121929 is the only source given.","how_to_check":"- Check whether the EmpireCMS version in use is 8.0 or lower.\n- Look for the file /e/member/mspace/index.php on the site.\n- unknown for any further check the sources do not describe.","plain_action":"","needs_analyst":true,"not_affected_if":["version-above-8.0"],"who_is_affected":"Sites running EmpireCMS up to version 8.0 that expose the member space page at /e/member/mspace/index.php are exposed. The sources do not say whether the page is reachable without an account or whether a default configuration is affected. Sites on other CMS products, or EmpireCMS versions above 8.0, are not affected by this report.","user_interaction":"yes","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000704,"input_tokens":4155,"output_tokens":577,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-121929':15A,18A '-2026':14A,17A '/e/member/mspace/index.php':36B,75C '8.0':27B,66C 'allow':8A 'argument':34B,80C 'attack':38B,93C,108C 'browser':48B 'cms':19B 'contact':112C 'craft':53B 'cross':10A,84C 'cross-sit':9A 'cve':13A,16A 'disclosur':116C 'discov':60C 'earli':113C 'empirecm':1A,20B,23B,63C 'empiresoft':62C 'exploit':96C 'file':74C 'flaw':57C 'function':71C 'handl':31B 'impact':67C 'inject':40B 'launch':91C 'link':54B 'manipul':77C 'may':104C 'member':5A 'open':51B 'packag':21B 'page':7A 'paramet':3A 'php':22B 'possibl':89C 'proper':30B 'public':102C 'releas':99C 'remot':94C 'respond':120C 'result':82C 'run':43B 'script':12A,41B,86C 'secur':56C 'site':11A,85C 'space':6A 'spacenam':2A,33B,81C 'unknown':70C 'use':106C 'vendor':110C 'version':26B 'visitor':46B 'way':123C","nicknames":[],"mitigations":[],"who_affected":"Sites running EmpireCMS up to version 8.0 that expose the member space page at /e/member/mspace/index.php are exposed. The sources do not say whether the page is reachable without an account or whether a default configuration is affected. Sites on other CMS products, or EmpireCMS versions above 8.0, are not affected by this report.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["cms","empirecms","medium","package","php"],"campaign_type":null,"first_public_at":"2026-11-04T19:17:32+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"cna@vuldb.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-121929","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-121929","severity":null,"published_at":"2026-11-04T19:17:32+00:00","modified_at":"2026-11-04T19:17:32+00:00","first_seen_at":"2026-11-04T19:28:48+00:00","fetched_at":"2026-11-04T19:28:48+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}