CVE-2026-129267
- Source
- https://cve.org/CVERecord?id=CVE-2026-129267
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-129267.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-129267
- Published
- 2026-11-14T17:15:16Z
- Modified
- 2026-11-15T02:46:41Z
- Severity
-
- 2.0 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P CVSS Calculator
- Summary
- sergix44 XBackBone MediaController.php getRawById cross site scripting
- Details
-
A vulnerability was found in sergix44 XBackBone up to 3.8.2. Impacted is the function MediaController::getRawById of the file app/Controllers/MediaController.php. The manipulation results in cross site scripting. It is possible to launch the attack remotely. The exploit has been made public and could be used. The pull request to fix this issue awaits acceptance.
- Database specific
{ "cna_assigner": "VulDB", "cwe_ids": [ "CWE-79", "CWE-94" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/129xxx/CVE-2026-129267.json" }- References
-
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/129xxx/CVE-2026-129267.json
- https://github.com/sergix44/xbackbone/
- https://github.com/sergix44/xbackbone/pull/673
- https://nvd.nist.gov/vuln/detail/CVE-2026-129267
- https://vuldb.com/cve/CVE-2026-129267
- https://vuldb.com/submit/1043413
- https://vuldb.com/vuln/437311
- https://vuldb.com/vuln/437311/cti
Affected packages
Git / github.com/sergix44/xbackbone
Affected ranges
- Type
- GIT
- Repo
- https://github.com/sergix44/xbackbone
- Events
-
IntroducedLast Affected
- Database specific
-
Show details
{ "extracted_events": [ { "range": [ { "introduced": "3.8.0" }, { "last_affected": "3.8.0" } ], "source": "AFFECTED_FIELD", "strategy": "StandaloneSingleVersion" }, { "range": [ { "introduced": "3.8.1" }, { "last_affected": "3.8.1" } ], "source": "AFFECTED_FIELD", "strategy": "StandaloneSingleVersion" }, { "range": [ { "introduced": "3.8.2" }, { "last_affected": "3.8.2" } ], "source": "AFFECTED_FIELD", "strategy": "StandaloneSingleVersion" } ] }