Dashboard / CVE-2026-120190

CVE-2026-120190

LOW
INFO Priority: 0.01 BB Relevance: 44/100
Published: 2026-11-01 Modified: 2026-11-06 First seen: 2026-11-01 Status: active

Attack Surface

Network Low Complexity

CVSS Vector Breakdown

AV: Network
AC: Low
PR: Low
UI: Passive
S: X
AT: None
VC: None
VI: Low
VA: None

Description

A security flaw has been discovered in PostyBirb Plus up to 3.1.75. Affected by this vulnerability is an unknown functionality of the file ui/src/views/submissions/submission-forms/form-components/DescriptionInput.tsx of the component Submission Description Editor. The manipulation results in cross site scripting. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks. Upgrading to version 3.1.76 addresses this issue. The patch is identified as 6b11c2345ad98ae59fd5404a9f1024eb1d10c8a4. It is advisable to upgrade the affected component.

Weakness Classification (2)

Affected Software (152)

VendorProductVersion
n/a PostyBirb Plus 3.1.0
n/a PostyBirb Plus 3.1.1
n/a PostyBirb Plus 3.1.2
n/a PostyBirb Plus 3.1.3
n/a PostyBirb Plus 3.1.4
n/a PostyBirb Plus 3.1.5
n/a PostyBirb Plus 3.1.6
n/a PostyBirb Plus 3.1.7
n/a PostyBirb Plus 3.1.8
n/a PostyBirb Plus 3.1.9
n/a PostyBirb Plus 3.1.10
n/a PostyBirb Plus 3.1.11
n/a PostyBirb Plus 3.1.12
n/a PostyBirb Plus 3.1.13
n/a PostyBirb Plus 3.1.14
n/a PostyBirb Plus 3.1.15
n/a PostyBirb Plus 3.1.16
n/a PostyBirb Plus 3.1.17
n/a PostyBirb Plus 3.1.18
n/a PostyBirb Plus 3.1.19
n/a PostyBirb Plus 3.1.20
n/a PostyBirb Plus 3.1.21
n/a PostyBirb Plus 3.1.22
n/a PostyBirb Plus 3.1.23
n/a PostyBirb Plus 3.1.24
n/a PostyBirb Plus 3.1.25
n/a PostyBirb Plus 3.1.26
n/a PostyBirb Plus 3.1.27
n/a PostyBirb Plus 3.1.28
n/a PostyBirb Plus 3.1.29
Showing 30 of 152 entries

References & Advisories (9)

https://vuldb.com/submit/1027356
third-party-advisory
https://vuldb.com/vuln/429529/cti
signature permissions-required

Bug Bounty Relevance

44 / 100
✓ Network accessible
✓ Low complexity

CVSS Score

2.0 / 10.0 v4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

0.39%
Raw Score 0.003920
Percentile 33.8%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00392
2026-11-12
0.00392
2026-11-10
0.00392
2026-11-09
0.00392
2026-11-08
0.00392
2026-11-07
0.00392
2026-11-06
0.00392
2026-11-05
0.00392
2026-11-04
0.00392
2026-11-03
0.00392
2026-11-02
0.00392
2026-11-01
0.00392

Intelligence Sources

mitre ref →
nvd ref →

External Links