A vulnerability was detected in PHPEMS 11.0.

Code

The project this record applies to. Exploit listings stay in References.

• Repository · github.com
• Repository · github.com

Timeline

Detection, updates, and resolution for this record.

1. Mar 11, 2026 · NIST NVD

   Detected

   A vulnerability was detected in PHPEMS 11.0. The affected element is an unknown function of the file /index.php?ask=app-ask. Performing a manipulation of the argument askcontent results in cross site scripting. The attack is possible to be carried out remotely. The exploit is now public and may be used.

2. Jun 17, 2026 · NIST NVD

   Updated

   A vulnerability was detected in PHPEMS 11.0. The affected element is an unknown function of the file /index.php?ask=app-ask. Performing a manipulation of the argument askcontent results in cross site scripting. The attack is possible to be carried out remotely. The exploit is now public and may be used.

Sources

• CVE.orgVulnerability recordCVE-2026-3946

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-3946

  A vulnerability was detected in PHPEMS 11.0. The affected element is an unknown function of the file /index.php?ask=app-ask. Performing a manipulation of the argument askcontent results in cross site scripting. The attack is possible to be carried out remotely. The exploit is now

  nvd.nist.gov

References

• Reference · github.com
• Reference · github.com
• Reference · vuldb.com
• Reference · vuldb.com
• Reference · vuldb.com