CVE-2026-18968

MEDIUM 4.3

ttttonyhe OBlog tags.php cross site scripting

CVSS Score

4.3

EPSS Score

0.0%

EPSS Percentile

0th

A security vulnerability has been detected in ttttonyhe OBlog up to 3ca6a45a2fcc81f6086751d8af124658720e8f8f. This issue affects some unknown processing of the file /tags.php. Such manipulation of the argument day leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The vendor was contacted early about this disclosure but did not respond in any way.

CWE	CWE-79 CWE-94
Vendor	ttttonyhe
Product	oblog
Published	Aug 5, 2026

Stay Ahead of the Next One

Get instant alerts for ttttonyhe oblog

Be the first to know when new medium vulnerabilities affecting ttttonyhe oblog are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

ttttonyhe / OBlog

3ca6a45a2fcc81f6086751d8af124658720e8f8f

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/386259 vuldb.com: https://vuldb.com/vuln/386259/cti vuldb.com: https://vuldb.com/cve/CVE-2026-18968 vuldb.com: https://vuldb.com/submit/860184 gist.github.com: https://gist.github.com/hackusman/a1ba43253d6a62ace31ef39ec325e973

Credits

🔍 hackus_man (VulDB User) VulDB CNA Team