Vincent-peugnet Wcms vulnerabilities

• vincent-peugnet wcms W (wcms) through 3.18.0 Unauthenticated Stored XSS via Login Username and Comments CVE-2026-105124 5.3 MediumOctober 3, 2026
• vincent-peugnet wcms W (wcms) through 3.18.0 RCE and Arbitrary File Write via Media Upload API CVE-2026-105123 8.7 HighOctober 3, 2026