cve.bz

sergix44 xbackbone vulnerabilities, newest first

Filter

By year: all 2026 2025 2024 2023 2022 2021

  1. 2.0CVE-2026-129267

    A vulnerability was found in sergix44 XBackBone up to 3.8.2. Impacted is the function MediaController::getRawById of the file app/Controllers/MediaController.php. The manipulation results in cross site scripting. It is possible to launch t…

  2. 5.3CVE-2026-110230EPSS 0.3%

    XBackBone through 3.8.2 contains a missing authorization vulnerability that allows authenticated users to change other users' upload share codes via the POST /upload/{id}/vanity route. Attackers can supply sequential upload ids to MediaCon…