A vulnerability classified as problematic has been found in DRIMO CMS up to 1.0 . This vulnerability affects the function searching of the file info.php . Performing a manipulation of the argument q results in cross site scripting. This vulnerability only affects products that are no longer supported by the maintainer. This vulnerability was named CVE-2026-11772 . The attack may be initiated remotely. There is no available exploit.