8 matches found
CVE-2026-27020
Photobooth prior to 1.0.1 has a cross-site scripting XSS vulnerability in user input fields. Malicious users could inject scripts through unvalidated form inputs. This vulnerability is fixed in 1.0.1...
CVE-2026-27020
Photobooth prior to 1.0.1 has a cross-site scripting XSS vulnerability in user input fields. Malicious users could inject scripts through unvalidated form inputs. This vulnerability is fixed in 1.0.1...
CVE-2026-27020 Photobooth has a XSS vulnerability in user input
Photobooth prior to 1.0.1 has a cross-site scripting XSS vulnerability in user input fields. Malicious users could inject scripts through unvalidated form inputs. This vulnerability is fixed in 1.0.1...
CVE-2026-27020 Photobooth has a XSS vulnerability in user input
Photobooth prior to 1.0.1 has a cross-site scripting XSS vulnerability in user input fields. Malicious users could inject scripts through unvalidated form inputs. This vulnerability is fixed in 1.0.1...
CVE-2026-27020
CVE-2026-27020 affects Photobooth prior to 1.0.1, with a cross‑site scripting (XSS) vulnerability in user input fields due to unvalidated inputs. Attackers could inject scripts via forms. The issue is addressed in version 1.0.1. The provided metrics indicate a Medium base score (5.3, CVSS v4.0) w...
CVE-2026-27020: Improper Neutralization of Input During Web Page Generation
Photobooth prior to 1.0.1 has a cross-site scripting XSS vulnerability in user input fields. Malicious users could inject scripts through unvalidated form inputs. This vulnerability is fixed in 1.0.1...
Photobooth Web-Component 跨站脚本漏洞
Photobooth Web-Component is a software developed by Lukas personally. Versions of Photobooth Web-Component prior to 1.0.1 contained a cross-site scripting vulnerability. This vulnerability stemmed from the lack of validation on user input fields, which could lead to cross-site scripting attacks...
PT-2026-21299
Photobooth prior to 1.0.1 has a cross-site scripting XSS vulnerability in user input fields. Malicious users could inject scripts through unvalidated form inputs. This vulnerability is fixed in 1.0.1...