Threats affecting pkg:github/welovemedia/FFmate

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.1	EPSS 0.2%	CVE-2026-5254welovemedia FFmate · Cross-site Scripting Medium5.1EPSS 0.2%2026-04-01CVE Database V5CVE-2026-5254 CVE-2026-5254 is a cross-site scripting (XSS) vulnerability in welovemedia FFmate versions up to 2.0.15. The issue exists in the /ui/app/components/AppJsonTreeView.vue file within the Webhook Handler component. This vulnerability allows remote attackers to inject malicious scripts via manipulated input. The vendor has not responded to the disclosure, and no official patch or remediation guidance is currently available. The CVSS 4.0 base score is 5.1, indicating a medium severity level. EPSS 0.2%Vulnerability	CVE Database V5	2026-04-01

Page 1 of 1