This vulnerability (CVE-2026-9160) in Arma Digital Media Inc.'s Website Template arises from improper neutralization of special elements used in the template engine. This flaw allows an attacker to perform code injection, potentially impacting the integrity of the system. The CVSS 3.1 base score is 4.3, indicating a medium severity with network attack vector, low attack complexity, no privileges required, user interaction required, and impact limited to integrity. The vendor has not provided any response or patch information as of the publication date.

The vulnerability allows code injection via the template engine, which can lead to integrity compromise of the affected system. There is no indication of confidentiality or availability impact. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no patch links are available, users should monitor official channels for updates. Until a fix is released, cautious use or disabling of the affected template engine features may reduce risk.