Threats affecting pkg:github/mvdicarlo/postybirb-plus

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.1	CVE-2026-120190PostyBirb Plus · Cross-site Scripting Medium5.12026-11-01GCVE DatabaseCVE-2026-120190 A cross-site scripting (XSS) vulnerability exists in PostyBirb Plus versions up to 3.1.75 in the Submission Description Editor component. This flaw allows remote attackers to inject malicious scripts via the DescriptionInput.tsx file. The vulnerability is addressed in version 3.1.76, which users are advised to upgrade to. Report on CVE-2026-120190 Vulnerability CWE-79 #ghsa-ggpr-cj64-vcq3	GCVE Database	2026-11-01

Page 1 of 1