CVE-2026-120190

LOW 3.5

PostyBirb Plus Submission Description Editor DescriptionInput.tsx cross site scripting

CVSS Score

3.5

EPSS Score

0.0%

EPSS Percentile

0th

A security flaw has been discovered in PostyBirb Plus up to 3.1.75. Affected by this vulnerability is an unknown functionality of the file ui/src/views/submissions/submission-forms/form-components/DescriptionInput.tsx of the component Submission Description Editor. The manipulation results in cross site scripting. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks. Upgrading to version 3.1.76 addresses this issue. The patch is identified as 6b11c2345ad98ae59fd5404a9f1024eb1d10c8a4. It is advisable to upgrade the affected component.

CWE	CWE-79 CWE-94
Vendor	n/a
Product	postybirb plus
Published	Nov 1, 2026

Stay Ahead of the Next One

Get instant alerts for n/a postybirb plus

Be the first to know when new low vulnerabilities affecting n/a postybirb plus are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

n/a / PostyBirb Plus

3.1.0 3.1.1 3.1.2 3.1.3 3.1.4 3.1.5 3.1.6 3.1.7 3.1.8 3.1.9 3.1.10 3.1.11 3.1.12 3.1.13 3.1.14 3.1.15 3.1.16 3.1.17 3.1.18 3.1.19 3.1.20 3.1.21 3.1.22 3.1.23 3.1.24 3.1.25 3.1.26 3.1.27 3.1.28 3.1.29 3.1.30 3.1.31 3.1.32 3.1.33 3.1.34 3.1.35 3.1.36 3.1.37 3.1.38 3.1.39 3.1.40 3.1.41 3.1.42 3.1.43 3.1.44 3.1.45 3.1.46 3.1.47 3.1.48 3.1.49 3.1.50 3.1.51 3.1.52 3.1.53 3.1.54 3.1.55 3.1.56 3.1.57 3.1.58 3.1.59 3.1.60 3.1.61 3.1.62 3.1.63 3.1.64 3.1.65 3.1.66 3.1.67 3.1.68 3.1.69 3.1.70 3.1.71 3.1.72 3.1.73 3.1.74 3.1.75

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/429529 vuldb.com: https://vuldb.com/vuln/429529/cti vuldb.com: https://vuldb.com/cve/CVE-2026-120190 vuldb.com: https://vuldb.com/submit/1027356 github.com: https://github.com/mvdicarlo/postybirb-plus/issues/504 github.com: https://github.com/mvdicarlo/postybirb-plus/pull/506 github.com: https://github.com/user-attachments/files/32685547/report.md github.com: https://github.com/mvdicarlo/postybirb-plus/commit/6b11c2345ad98ae59fd5404a9f1024eb1d10c8a4 github.com: https://github.com/mvdicarlo/postybirb-plus/releases/tag/v3.1.76

Credits

🔍 fifker (VulDB User)