CVE-2026-78738 identifies a Cross Site Scripting (XSS) vulnerability in Silverpeas Core 6.4.6 specifically affecting the Document management file upload functionality. The vulnerability enables injection of malicious scripts through the file upload process. No CVSS score or detailed technical data beyond this description is provided. No vendor advisory or patch information is available, and no known exploits have been reported.

Successful exploitation of this XSS vulnerability could allow attackers to execute arbitrary scripts in the context of the affected application, potentially leading to session hijacking, defacement, or other client-side attacks. However, no active exploitation has been reported, and the exact impact depends on the application's usage and context.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider restricting or sanitizing file uploads and applying web application firewall rules to detect and block malicious payloads targeting the upload feature.