CVE-2026-6953: Intermark It Webcontrol CMS

Medium severity, CVSS 5.1. EPSS: 0.4% chance of exploitation in the next 30 days.

HTML injection vulnerability in Intermark IT's WebControl CMS v3.5. This vulnerability allows an attacker to send an email containing malicious HTML code to a victim via the contact form. To exploit this vulnerability, the attacker must send a request using the 'nombreApellidos', 'dirección ', and 'comentarios ' parameters to '/processContact.do'.

Affected products

• Intermark It Webcontrol CMS: any version

Published 2026-06-30. Last modified 2026-06-30.