A vulnerability, which was classified as problematic, was found in wCMS 1.4. Impacted is an unknown function of the component New Blog Handler. Such manipulation leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2026-38669. The attack can be launched remotely. No exploit exists.