CVE-2026-129267

The sergix44 XBackBone software, version 3.8.2 and below , is vulnerable to a cross-site scripting (XSS) flaw in the MediaController::getRawById function within app/Controllers/MediaController.php. This vulnerability allows for remote attacks through input manipulation. While a public exploit exi...