VULNERABILITY INTELLIGENCE

CVE-2026-27020

EPSS probability0.30%
CISA KEVNot currently listed
Published2026-02-20
Last modified2026-06-17

Description

Photobooth prior to 1.0.1 has a cross-site scripting (XSS) vulnerability in user input fields. Malicious users could inject scripts through unvalidated form inputs. This vulnerability is fixed in 1.0.1.

Weakness classification

  • security-advisories@github.com: CWE-79

Primary references