جزئیات آسیب‌پذیری
CVE-2026-120190
postybirb_plus PostyBirb Plus
PostyBirb Plus Submission Description Editor DescriptionInput.tsx cross site scripting
CVSS 4.0
5.1متوسط
نمای کلی
اکسپلویت‌های عمومی
اخبار مرتبط
خط زمانی
خلاصه‌ی فارسی
خلاصه‌ی فارسی برای این آسیب‌پذیری هنوز تهیه نشده است.
شرح رسمی (انگلیسی)
A security flaw has been discovered in PostyBirb Plus up to 3.1.75. Affected by this vulnerability is an unknown functionality of the file ui/src/views/submissions/submission-forms/form-components/DescriptionInput.tsx of the component Submission Description Editor. The manipulation results in cross site scripting. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks. Upgrading to version 3.1.76 addresses this issue. The patch is identified as 6b11c2345ad98ae59fd5404a9f1024eb1d10c8a4. It is advisable to upgrade the affected component.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 5.1متوسط | 4.0 | CVEProject cvelistV5 (CNA) (VulDB) | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P |
| 3.5پایین | 3.1 | CVEProject cvelistV5 (CNA) (VulDB) | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C |
| 3.5پایین | 3.0 | CVEProject cvelistV5 (CNA) (VulDB) | CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C |
| 4.0متوسط | 2.0 | CVEProject cvelistV5 (CNA) (VulDB) | AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:OF/RC:C |
محصولات آسیب‌پذیر
| فروشنده | محصول | نسخه‌ها | منبع |
|---|---|---|---|
| postybirb_plus | PostyBirb Plus | 3.1.0 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.1 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.10 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.11 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.12 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.13 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.14 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.15 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.16 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.17 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.18 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.19 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.2 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.20 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.21 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.22 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.23 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.24 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.25 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.26 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.27 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.28 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.29 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.3 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.30 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.31 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.32 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.33 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.34 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.35 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.36 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.37 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.38 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.39 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.4 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.40 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.41 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.42 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.43 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.44 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.45 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.46 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.47 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.48 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.49 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.5 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.50 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.51 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.52 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.53 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.54 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.55 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.56 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.57 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.58 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.59 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.6 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.60 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.61 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.62 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.63 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.64 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.65 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.66 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.67 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.68 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.69 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.7 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.70 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.71 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.72 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.73 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.74 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.75 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.8 | CVEProject cvelistV5 (CNA) |
| postybirb_plus | PostyBirb Plus | 3.1.9 | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۹- https://vuldb.com/vuln/429529 vdb-entry
- https://vuldb.com/vuln/429529/cti signaturepermissions-required
- https://vuldb.com/cve/CVE-2026-120190 third-party-advisory
- https://vuldb.com/submit/1027356 third-party-advisory
- https://github.com/mvdicarlo/postybirb-plus/issues/504 issue-tracking
- https://github.com/mvdicarlo/postybirb-plus/pull/506 issue-trackingpatch
- https://github.com/user-attachments/files/32685547/report.md exploit
- https://github.com/mvdicarlo/postybirb-plus/commit/6b11c2345ad98ae59fd5404a9f1024eb1d10c8a4 patch
- https://github.com/mvdicarlo/postybirb-plus/releases/tag/v3.1.76 patch
اطلاعات
- تاریخ انتشار
- ۱۴۰۵/۰۸/۱۰
- آخرین به‌روزرسانی
- ۱۴۰۵/۰۸/۱۰
- وضعیت
- PUBLISHED
- صادرکننده (CNA)
- VulDB
- اولویت کلون
- به‌زودی
پیش‌بینی بهره‌برداری (EPSS)
۰٫۳۹٪
احتمال بهره‌برداری در ۳۰ روز
۳۳٫۳٪
صدک (نسبت به همه‌ی CVEها)
ضعف‌ها (CWE)
- CWE-79Cross Site Scripting
- CWE-94Code Injection