Threats tagged 'ghsa-4px6-mj2j-jp7w'

CVE-2026-7677 is a cross-site scripting (XSS) vulnerability in kerwincui FastBee versions up to 1.2.1. It affects the Add function in the System Notice Handler component, specifically in the SysNoticeController.java file. The vulnerability allows remote attackers to manipulate the noticeContent argument to execute XSS attacks. The vulnerability has a low CVSS score of 3.5 and requires low privileges with user interaction. Public exploit code has been disclosed, but no vendor response or patch is currently available.