anonhaven

CVE-2026-51565

NONE
Updated Jul 28, 2026
PHP
Parameter Value
Vendor PHP
Public PoC No

Cross-site scripting (XSS) vulnerability in Modules/Docs/DocsController.php in Milk admin <=0.9.8 allows remote attackers to inject arbitrary web script or HTML via the action parameter in a crafted request

Vulnerable Products

n/a:n/a

References 3

https://github.com/1337Skid/CVE-2026-51565
cve@mitre.org
https://github.com/giuliopanda/milk-admin/
cve@mitre.org
https://github.com/giuliopanda/milk-admin/blob/6389386de2a9226c84ecb7e79cd16d7c…
cve@mitre.org
Share Post Share Share Share

Related Vulnerabilities

CVE-2026-51078

PHP

None

CVE-2026-51077

PHP

None

CVE-2026-55579

PHP

9.8

CVE-2026-55578

PHP

8.8

CVE-2026-54540

PHP

8.8