CVE-2026-2145 | cym1102 nginxWebUI up to 4.3.7 Web Management Interface /adminPage/conf/check nginxDir cross site scripting (Issue 203)

A vulnerability described as problematic has been identified in cym1102 nginxWebUI up to 4.3.7. The impacted element is an unknown function of the file /adminPage/conf/check of the component Web Management Interface. Such manipulation of the argument nginxDir leads to cross site scripting.

This vulnerability is documented as CVE-2026-2145. The attack can be executed remotely. Additionally, an exploit exists.

The project was informed of the problem early through an issue report but has not responded yet.