CVE-2026-120190

    Dashboard / Vulnerabilities / CVE-2026-120190

    CVE-2026-120190

    Published: 1 Nov 2026Last Modified: 2 Nov 2026

    Summary: PostyBirb Plus Submission Description Editor DescriptionInput.tsx cross site scripting

    Details: A security flaw has been discovered in PostyBirb Plus up to 3.1.75. Affected by this vulnerability is an unknown functionality of the file ui/src/views/submissions/submission-forms/form-components/DescriptionInput.tsx of the component Submission Description Editor. The manipulation results in cross site scripting. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks. Upgrading to version 3.1.76 addresses this issue. The patch is identified as 6b11c2345ad98ae59fd5404a9f1024eb1d10c8a4. It is advisable to upgrade the affected component.

    References: https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/120xxx/CVE-2026-120190.json, https://nvd.nist.gov/vuln/detail/CVE-2026-120190, https://vuldb.com/cve/CVE-2026-120190, https://vuldb.com/submit/1027356, https://vuldb.com/vuln/429529, https://github.com/mvdicarlo/postybirb-plus/issues/504, https://vuldb.com/vuln/429529/cti, https://github.com/mvdicarlo/postybirb-plus/commit/6b11c2345ad98ae59fd5404a9f1024eb1d10c8a4, https://github.com/mvdicarlo/postybirb-plus/pull/506, https://github.com/mvdicarlo/postybirb-plus/releases/tag/v3.1.76, https://github.com/user-attachments/files/32685547/report.md

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 568aa17e19012c6cdeb8695a393ac9e1598cb399
    Fixed -6b11c2345ad98ae59fd5404a9f1024eb1d10c8a4

    Affected versions

    3.1.0
    3.1.1
    3.1.11
    3.1.12
    3.1.13
    3.1.14
    3.1.16
    3.1.17
    3.1.18
    3.1.19
    3.1.2
    3.1.20
    3.1.21
    3.1.22
    3.1.23
    3.1.24
    3.1.25
    3.1.26
    3.1.27
    3.1.28
    3.1.29
    3.1.3
    3.1.30
    3.1.31
    3.1.32
    3.1.33
    3.1.34
    3.1.35
    3.1.36
    3.1.37
    3.1.39
    3.1.4
    3.1.40
    3.1.41
    3.1.42
    3.1.43
    3.1.44
    3.1.45
    3.1.46
    3.1.47
    3.1.48
    3.1.49
    3.1.5
    3.1.50
    3.1.51
    3.1.52
    3.1.53
    3.1.54
    3.1.55
    3.1.56
    3.1.57
    3.1.58
    3.1.59
    3.1.6
    3.1.60
    3.1.61
    3.1.62
    3.1.63
    3.1.65
    3.1.66
    3.1.67
    3.1.68
    3.1.69
    3.1.7
    3.1.70
    3.1.71
    3.1.72
    3.1.73
    3.1.74
    3.1.75
    3.1.8
    3.1.9

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High