CVE-2026-36521 identifies a Cross Site Scripting (XSS) vulnerability in the site configuration management module of PublicCMS V5.202506.d. The vulnerability permits injection of malicious scripts, which could be executed in the context of users interacting with the affected module. There is no information on exploitation in the wild or vendor-provided fixes. The vulnerability was published on 2026-06-15 with no CVSS score or remediation level assigned.

Successful exploitation of this XSS vulnerability could allow an attacker to execute arbitrary scripts in the context of the affected web application module, potentially leading to session hijacking, defacement, or other client-side attacks. However, no specific impact details or exploit reports are available.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when interacting with the site configuration management module and consider applying any available workarounds or input validation controls if feasible.